Security Flaw Found in XRPL NPM Package

A security flaw has been uncovered in the official XRPL NPM package, according to Foresight News and Aikido Security. This backdoor program poses a significant threat by enabling unauthorized access to user private keys and potential transmission of this sensitive data to malicious actors. Versions 4.2.1 through 4.2.4 are affected, and users are advised to avoid upgrading to these vulnerable versions.