XRP Ledger developer kit compromised with backdoor to steal wallet private keys

Aikido Security disclosed a vulnerability in the XRP Ledger’s (XRPL) official JavaScript SDK, revealing that multiple compromised versions of the XRPL Node Package Manager (NPM) package were published to the registry starting April 21. The affected versions, v4. 2. 1 through v4 source: https://cryptoslate.com/xrp-ledger-developer-kit-compromised-with-backdoor-to-steal-wallet-private-keys/