Open source packages published on the npm and PyPI repositories were laced with code that stole wallet credentials from dYdX developers and backend systems and, in some cases, backdoored devices, ...
Compromised dYdX npm and PyPI packages delivered wallet-stealing malware and a RAT via poisoned updates in a software supply chain attack.
This project is based on the excellent work of johnwoo-nl/emproto. Without their invaluable reverse-engineering of the EVSE Master UDP protocol, this Home Assistant integration would not have been ...