Affected users should block lightning versions 2.6.2 and 2.6.3, downgrade to 2.6.1, rotate exposed secrets, and audit GitHub activity for suspicious commits. The project's GitHub account appears to be compromised, as they are closing reports of the attack. More details: socket.dev/blog/lightni...

3 likes 1 replies