Critical Security Alert: XRP Community Raises Concern Over Compromised npm Package

The XRP community is in a state of alert after security experts have issued a critical warning regarding the XRPL NPM package, a popular library used to integrate JavaScript/TypeScript applications with the XRP Ledger. Aikido Security discovered a backdoor in the official XRPL NPM package that steals private keys and sends them to attackers. This vulnerability has affected various versions (4.2.1 to 4.2.4), prompting immediate action from prominent figures like Thomas Silkjær, Head of Analytics and Compliance at InFTF. ⚠️