XRP Ledger Foundation reported that xrpl.js versions v4.2.1 through v4.2.4 and v2.14.2, hosted on Node Package Manager (NPM), were specifically impacted during the April 2025 security incident

Event date

April 22, 2025

Quotes that support claims

XRP Ledger engineers have seemingly addressed the concern by releasing updated versions of the code to “override the compromised packages and recommend that anyone using the impacted JavaScript libraries (v4.2.1-4.2.4 and v2.14.2) update immediately. The team also said it would release a post-mortem of the issue once it had a better understanding of how it was released.

Tags

Week 17 of 2025