Poisoned Pipeline / Incidents / AS233
lottie-player prompted wallet drains
Catalogued from the tstromberg supplychain-attack-data dataset
(community-curated incident corpus). Included because first-party
sources exist for it; see the links below — vendor advisories, project
incident reports, and researcher write-ups. Not based on aggregator
coverage.
Mapped techniques
- T0184 Harvesting sensitive information from files
supply-chain campaign
Wallet/keys targeted.
Sources
- https://www.wiz.io/blog/lottie-player-supply-chain-attack
- https://www.sonatype.com/blog/lottie-player-compromised-in-supply-chain-attack-all-you-need-to-know
- https://www.reversinglabs.com/blog/differential-analysis-raises-red-flags-over-lottiefiles-lottie-player
- https://github.com/LottieFiles/lottie-player/issues/254
- https://lottiefiles.com/blog/lottiefiles-updates/incident-report-unauthorized-versions-of-lottie-player-npm-package