Swarm’s Ethersphere hit by npm supply-chain attack targeting node wallet keys

This attack stands out less for its novelty than for its target: node operators' wallet material, reached through the trusted channels of npm and an auto-updating desktop client. The plaintext-password-in-config design turns a routine file read into potential key compromise, and the backdoor means exposure may not end with the cleanup. The practical takeaway is that the official package and desktop release pipeline is itself an attack surface, not just the Bee node software. Whether affected operators detect and rotate exposed keystores, and whether any losses surface beyond the current unconfirmed status, is the open question.