Aikido Security: A backdoor was found in the XRPL NPM package to steal private keys, and versions 4.2.1-4.2.4 were affected

according to the encryption security research institution Aikido Security, a security vulnerability was found in the official XRPL NPM package. The backdoor program will steal user private keys and send them to attackers. The affected versions are 4.2.1 to 4.2.4, Aikido Security recommends that users of affected versions do not upgrade for now.