
In a significant security breach, the widely-used Ripple’s xrpl.js npm package was backdoored by unknown attackers, compromising specific versions to steal private keys. This alarming incident impacts the XRP Ledger, a blockchain platform launched by Ripple Labs. The attack was initiated on April 21, 2025, and involved adding malicious code intended to transmit stolen private keys to an external domain.