Expired75% confidenceEventExact time
In the 2018 event-stream incident, an attacker took over the maintenance rights of an npm package and implanted malicious code to steal Bitcoin wallet private keys; the package had over 2 million weekly downloads.
5
Sources
75%
Confidence
Medium-term (~90 days)
Relevance
7/2/2026
First Seen
Valid until: 9/30/2026(expired)
Sources
Related Claims
UnverifiedIn the ctx package incident of 2022, an attacker hijacked a package with millions of downloads and stole sensitive information such as AWS keys.77% similarUnverifiedIn 2018, the npm ecosystem saw the event-stream incident, in which a widely depended-upon open-source package had cryptocurrency wallet-stealing code injected by a malicious maintainer, affecting millions of downloads.76% similarVerifiedIn 2021, the npm package ua-parser-js (with over 7 million weekly downloads) had cryptocurrency mining software planted in it after the original author's account was hijacked.70% similarUnverifiedThe 2022 LastPass cloud backup breach resulted in attackers obtaining the encrypted password vaults of millions of users.67% similarUnverified勒索软件攻击者往往会在潜伏数周至数月后才触发加密程序，期间通过横向移动渗透备份系统、域控制器等关键节点66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/61432API
curl https://kongchang.com/api/v1/knowledge/claims/61432MCP
get_claim(id=61432)