Alchemy Security Update: NPM Supply Chain Attack
Summary
Alchemy Builders received a security update regarding the recent NPM supply chain attack. Alchemy conducted a full review and confirmed that none of the vulnerable packages are currently running in production, were ever installed on their systems, or are dependencies of their open-source packages. This means Alchemy's Smart Wallets remain safe to use, though they will continue monitoring the situation closely.
## 
Heads up Alchemy @Builder ! SECURITY ALERT
Following reports of the NPM supply chain attack involving malicious code discovered in popular open source packages, we conducted a full review of our codebases.
Our findings:
- None of the vulnerable packages are running in production
- None of the vulnerable packages at issue were ever installed on Alchemy systems
- None of Alchemy's open source packages depend on the vulnerable packages
Alchemyโs Smart Wallets are safe to continue using.
We'll continue monitoring closely and share updates if anything changes.
๐ The Alchemy Team
https://x.com/Alchemy/status/1965194621761601968
๐จSECURITY ALERT: Following reports of the NPM supply chain attack involving malicious code discovered in popular open source packages, we conducted a full review of our codebases.
Our findings:
- None of the vulnerable packages are running in production
- None of the vulnerable
X
