> #### Remediation
>
> If you are a package maintainer, there are a few ways you can check if you have been impacted, including:
> 
> - Checking your local node_modules to see if it contains the malware: grep -R 'checkethereumw'
> - Checking your npm cache with [this script](https://gist.github.com/phxgg/737198b6e945aba7046e9f9328576271) by phxgg
> - Checking your project with [this script](https://github.com/AndrewMohawk/RandomScripts/blob/main/scan_for_deps_qix-2025-08-09.sh) by AndrewMohawk
>
> If you are a user, make sure you are double checking any transactions you are signing to make sure the addresses are correct. For more information, you can refer to the [SEAL Framework](https://frameworks.securityalliance.org/wallet-security/signing-verification.html) on signing and verifying transactions.

0xbitcoiner

https://image.nostr.build/134169b58221554fc29fa2c7d963d9d224b8d0c447f1767f6a441d19f017c602.png

BitByBit21

And most likely that transaction was just to test the hack! Hahaha

DarthCoin

Despite the magnitude of the breach, the attacker appears to have only “stolen” around 5 cents of ETH and 20 USD of a memecoin with a whopping 588 USD of trading volume over the past 24 hours. Indeed, it seems like the biggest financial impact of this entire incident will be the collective thousands of hours spent by engineering and security teams around the world working to clean compromised environments, and the millions of dollars of sales contracts that will inevitably be signed as a result of this new case study.

security

> #### Impact
>
> Despite the magnitude of the breach, the attacker appears to have only “stolen” around 5 cents of ETH and 20 USD of a memecoin with a whopping 588 USD of trading volume over the past 24 hours. Indeed, it seems like the biggest financial impact of this entire incident will be the collective thousands of hours spent by engineering and security teams around the world working to clean compromised environments, and the millions of dollars of sales contracts that will inevitably be signed as a result of this new case study.
>
> **[...read more at securityalliance.org](https://www.securityalliance.org/news/2025-09-npm-supply-chain)**

ImpactImpact

RemediationRemediation