Product
lottie-player
- First Reported
- Oct 31, 2024
- Latest Reported
- Oct 31, 2024
Reported Context (1)
- On October 30, 2024, a supply chain attack was initiated against the popular JavaScript library lottie-player, injecting malicious code that populates a Web3 wallet connection prompt on legitimate websites using the Compromised lottie-player Versions Injected Malicious Crypto Wallet Prompts
People (1)
MITRE ATT&CK (1)
Vendors (1)
Products (1)
Industries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.