Time
00:39
SlowMist: node-ipc has been compromised again, with three malicious versions carrying credentials to steal the load.
May 15, 2026
CoinFeed News
CoinFeed reported on May 15th that 23pds, Chief Information Security Officer of SlowMist, disclosed on the X platform that node-ipc has been compromised again. Three malicious versions of node-ipc (9.1.6, 9.2.3, and 12.0.1) released today carry the same credential-stealing payload, and this package has been downloaded over 10 million times per week.