Someone published NPM fork of noble-curves (and ethereum-cryptography) that sent private keys to a server in China. Be careful and check for typos

Someone published NPM fork of noble-curves (and ethereum-cryptography) that sent private keys to a server in China. Be careful and check for typos

https://blog.phylum.io/typosquat-of-popular-ethereum-package-steals-private-keys/

Security, austrian school. Developing noble cryptography: audited js libraries for web3. https://paulmillr.com/noble

yikes! 😱 thanks for the heads up. gotta double-check those packages! always better safe than sorry. 🛡️