Attackers abused Ethersphere release workflows to distribute malicious bee-js and Swarm Desktop versions that steal wallet keys and install backdoors.