1import{S as ce,i as ue,s as ne,N as X,z as fe,A as de,C as _e,R as me,T as ie,t as we,b as he,D as ye,O as re,e as r,d as m,f as d,l as p,m as n,k as w,j as s,n as _,o as D,B as ve,p as c,q as l,y as be}from"./index.bd0d3ab8.js";import{L as ge}from"./Layout.872cfa2b.js";function Ee(b){let t,i,u,v,o,f,g,$,A,F,E,H,O,k,N,R,P,W,S,x,z,T,h,B,C,J,M,U,y,j,K,Q,I,V;return{c(){t=r("figure"),i=r("picture"),u=r("source"),v=m(),o=r("img"),g=m(),$=r("figcaption"),A=d("Photo credit @austindistel on Unsplash"),F=m(),E=r("h2"),H=d("Problem"),O=m(),k=r("p"),N=d("Lottie Files was recently hacked with malware displaying a crypto wallet popup on websites. This seems to target websites with React, which also includes WordPress websites."),R=m(),P=r("h2"),W=d("Solution"),S=m(),x=r("p"),z=d("Downgrade to version 2.0.4 of lottie files."),T=m(),h=r("p"),B=d("If you have a newer version or "),C=r("code"),J=d("@latest"),M=d(" (which is bad security practice for reasons now obvious), downgrade to 2.0.4 or earlier."),U=m(),y=r("p"),j=r("code"),K=d("https://unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js"),Q=m(),I=r("code"),V=d("https://unpkg.com/@lottiefiles/[email protected]/dist/lottie-player.js"),this.h()},l(e){t=p(e,"FIGURE",{});var a=n(t);i=p(a,"PICTURE",{});var G=n(i);u=p(G,"SOURCE",{type:!0,srcset:!0,alt:!0}),v=w(G),o=p(G,"IMG",{src:!0,alt:!0}),G.forEach(s),g=w(a),$=p(a,"FIGCAPTION",{});var Y=n($);A=_(Y,"Photo credit @austindistel on Unsplash"),Y.forEach(s),a.forEach(s),F=w(e),E=p(e,"H2",{});var Z=n(E);H=_(Z,"Problem"),Z.forEach(s),O=w(e),k=p(e,"P",{});var ee=n(k);N=_(ee,"Lottie Files was recently hacked with malware displaying a crypto wallet popup on websites. This seems to target websites with React, which also includes WordPress websites."),ee.forEach(s),R=w(e),P=p(e,"H2",{});var te=n(P);W=_(te,"Solution"),te.forEach(s),S=w(e),x=p(e,"P",{});var se=n(x);z=_(se,"Downgrade to version 2.0.4 of lottie files."),se.forEach(s),T=w(e),h=p(e,"P",{});var L=n(h);B=_(L,"If you have a newer version or "),C=p(L,"CODE",{});var oe=n(C);J=_(oe,"@latest"),oe.forEach(s),M=_(L," (which is bad security practice for reasons now obvious), downgrade to 2.0.4 or earlier."),L.forEach(s),U=w(e),y=p(e,"P",{});var q=n(y);j=p(q,"CODE",{});var le=n(j);K=_(le,"https://unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js"),le.forEach(s),Q=w(q),I=p(q,"CODE",{});var ae=n(I);V=_(ae,"https://unpkg.com/@lottiefiles/[email protected]/dist/lottie-player.js"),ae.forEach(s),q.forEach(s),this.h()},h(){D(u,"type","image/avif"),D(u,"srcset","/img/blog/person-distress-computer.avif"),D(u,"alt",""),ve(o.src,f="/img/blog/person-distress-computer.jpg")||D(o,"src",f),D(o,"alt","")},m(e,a){c(e,t,a),l(t,i),l(i,u),l(i,v),l(i,o),l(t,g),l(t,$),l($,A),c(e,F,a),c(e,E,a),l(E,H),c(e,O,a),c(e,k,a),l(k,N),c(e,R,a),c(e,P,a),l(P,W),c(e,S,a),c(e,x,a),l(x,z),c(e,T,a),c(e,h,a),l(h,B),l(h,C),l(C,J),l(h,M),c(e,U,a),c(e,y,a),l(y,j),l(j,K),l(y,Q),l(y,I),l(I,V)},p:be,d(e){e&&s(t),e&&s(F),e&&s(E),e&&s(O),e&&s(k),e&&s(R),e&&s(P),e&&s(S),e&&s(x),e&&s(T),e&&s(h),e&&s(U),e&&s(y)}}}function ke(b){let t,i;const u=[b[0],pe];let v={$$slots:{default:[Ee]},$$scope:{ctx:b}};for(let o=0;o<u.length;o+=1)v=X(v,u[o]);return t=new ge({props:v}),{c(){fe(t.$$.fragment)},l(o){de(t.$$.fragment,o)},m(o,f){_e(t,o,f),i=!0},p(o,[f]){const g=f&1?me(u,[f&1&&ie(o[0]),f&0&&ie(pe)]):{};f&2&&(g.$$scope={dirty:f,ctx:o}),t.$set(g)},i(o){i||(we(t.$$.fragment,o),i=!0)},o(o){he(t.$$.fragment,o),i=!1},d(o){ye(t,o)}}}const pe={layout:"blog_layout",title:"Fix hacked crypto wallet popup on your website",slug:"lottie-files-hack",date:"2024/10/30",updated_date:"2024/10/30",author:"Justin Golden",preview_text:"Fix hacked crypto wallet popup on your website - downgrade to 2.0.4 of lottie files",img:"/img/blog/person-distress-computer.avif",categories:["webdev"],keywords:["crypto wallet popup","lottie files hack","lottie files hack crypto wallet popup"]};function Pe(b,t,i){return b.$$set=u=>{i(0,t=X(X({},t),re(u)))},t=re(t),[t]}class Ce extends ce{constructor(t){super(),ue(this,t,Pe,ke,ne,{})}}export{Ce as default,pe as metadata};
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.