Security firm Socket said attackers received Bee node settings and encrypted wallet keystores through a compromised JavaScript package, creating a potential path to wallets used by node operators.
Socket identified bee-js 13.3.0, uploaded to npm Monday, Nov. 9, as the affected release. It said the package accessed Bee configuration files and encrypted keystores before transmitting their contents.
The configuration files held the keystore password in plain text, Socket said. An attacker who obtained both the password and a wallet file could potentially open the encrypted keystore.
Bee is node software for Swarm, a decentralized storage project.
