Ledger: The new Ledger Connect Kit 1.1.8 security version has been released.
BlockBeats news, on December 15th, Ledger announced that the new secure version of Ledger Connect Kit 1.1.8 has been released. It was confirmed that the malicious code of Ledger and WalletConnect has been disabled. Users can now safely use Ledger Connect Kit, but it is recommended to wait for 24 hours and clear the browser cache.
Previously reported by BlockBeats, on December 14th, the ledgerconnect suite suffered a supply chain attack, where the attacker injected a payload that drained wallets into a popular NPM package. Later, Ledger officials stated that they had identified and removed the malicious version of Ledger Connect Kit, and are now pushing the legitimate version to replace the malicious file.