Adform Ad Script Hijacked to Swap Crypto Wallet Addresses in Browsers

·8 views

Online advertising firm Adform had its JavaScript tracking library 'trackpoint-async.js' compromised in a supply chain attack discovered around July 27, 2026. Attackers injected an obfuscated payload into the legitimate script served from s2.adform.net, causing it to silently replace Bitcoin, Ethereum, and TRON wallet addresses both on users' clipboards and on web pages they viewed. The malicious script also transmitted victims' IP addresses, referrer URLs, and page paths to an external server at 84.32.102[.]230:7744. Because the script was delivered through Adform's infrastructure, numerous downstream websites unknowingly passed the compromised code to their visitors' browsers. Adform stated that no software was permanently installed and the attack's impact was confined to the period when an affected page remained open in the browser.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

AI Coding Tools Boost PR Speed but May Erode Engineers' Diagnostic Judgment

A software engineering manager observed that after his team adopted AI-assisted coding, output metrics improved markedly — more tickets closed, faster cycle times, and higher PR volume. However, a subtle production incident revealed a deeper problem: a change that passed all tests was silently degrading a retry path under real load conditions no test environment had replicated. When questioned, the engineer understood the code but had never thought to ask how it would behave under a slow — not failed — downstream service, because the AI had generated that logic before the question arose. The manager argues that AI tools can make a team appear more capable before it actually becomes more capable, bypassing the friction-driven learning that builds engineering instinct. He also notes downstream effects: review quality drops as PR volume rises, debugging becomes symptom-patching rather than root-cause analysis, and engineers lack the incident-response experience needed when problems don't have obvious answers.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How to Build a Production-Grade SaaS Billing System Using Stripe

A technical guide published on DEV Community outlines common pitfalls developers face when scaling Stripe-based billing beyond a few hundred customers. The article warns that processing Stripe webhooks synchronously within HTTP request handlers leads to duplicate events, out-of-order processing, and corrupted database states. To address this, the guide recommends an asynchronous architecture using a message queue — such as Redis, RabbitMQ, or AWS SQS — where a lightweight API receiver verifies webhook signatures and queues payloads for a separate worker to process. Because Stripe guarantees at-least-once delivery, the guide also demonstrates implementing idempotency checks using Redis keys with a 24-hour TTL to prevent duplicate billing actions. Usage-based billing is flagged as another high-risk area, with the naive end-of-month calculation approach cited as prone to race conditions and Stripe API rate-limit issues.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Releases Open Full-Stack React and Node.js Game Store Template

A developer has launched Hunter Store, a full-stack web template aimed at simplifying the setup of gaming and digital product storefronts. The template is built with React, React Router, and custom CSS on the frontend, while the backend runs on Node.js, Express, and MongoDB. Key features include live search with backend auto-complete, cart management, a dark UI, and bilingual English and Arabic support with RTL layout. The frontend is deployed on Vercel and the backend on Render, with a live demo publicly available. The project is listed for sale on Gumroad, and the developer is actively seeking community feedback on UI/UX and additional features.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How Modern Anti-Bot Systems Work and What It Takes to Scrape Past Them

Popular websites protecting valuable data such as prices, listings, and inventory rely on layered bot-detection systems from vendors like Cloudflare, DataDome, and PerimeterX. These systems evaluate every request across multiple independent signals, including IP reputation, TLS and HTTP fingerprints, JavaScript sensor output, and behavioral patterns. A datacenter IP address and a non-browser network fingerprint are the primary reasons most scrapers get blocked, making header spoofing alone largely ineffective. Reliable scraping requires an escalation strategy: starting with a Chrome-impersonating HTTP request, upgrading to a stealth browser when needed, and rotating IPs once they are flagged. Even with these techniques, success is probabilistic, and the most protected sites require residential or mobile IP addresses to avoid detection.

0 comments Read more at DEV Community