![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNPeIEds2Yy8KQh5fB_BMbhKyf9Aq_wl3ltqOlLHuDa5ZQWXho7murXiKE0qjeokjHBbDYEov7hf8qGFNWykVdxuuf7en8BzynuYgXLs_VPbSjmjTrEnxckAt2HAXDCwKFF4pLo7Jc1apjA_OtfOPQIbc6cBDgGVmYcCPuPJ9jMYcM0JEu1-39pogQDtbQ/s1600/bitcoin.jpg)
Crypto hardware wallet maker Ledger published a new version of its “@ledgerhq/connect-kit” npm module after unidentified threat actors pushed malicious code that led to the theft of more than $600,000 in virtual assets.
The compromise was the result of a former employee falling victim to a phishing attack, the company said in a statement.
This allowed the attackers to gain
Source:: The Hackers News