JavaScript SDK exploit

XRPL.js library backdoor exposes private keys, and developers urge updates now

April 17, 2025 •

blockchain cybersecurity crypto supply chain risk

A major XRPL.js vulnerability risks private key theft via NPM; devs must update to v4.2.5 or roll back to secure affected projects now.