diff --git a/blog/2024/clio-2.3.0.md b/blog/2024/clio-2.3.0.md index 27e9263346..239c4cde67 100644 --- a/blog/2024/clio-2.3.0.md +++ b/blog/2024/clio-2.3.0.md @@ -12,7 +12,7 @@ markdown: hide: true --- -## Introducing Clio version 2.3.0 +# Introducing Clio version 2.3.0 Version 2.3.0 of Clio, an XRP Ledger API server optimized for HTTP and WebSocket API calls, is now available. This release adds new features and bug fixes. diff --git a/blog/2025/clio-2.3.1.md b/blog/2025/clio-2.3.1.md index f4f59eb9ec..e85c1151c5 100644 --- a/blog/2025/clio-2.3.1.md +++ b/blog/2025/clio-2.3.1.md @@ -11,8 +11,7 @@ markdown: editPage: hide: true --- - -## Introducing Clio version 2.3.1 +# Introducing Clio version 2.3.1 Version 2.3.1 of Clio, an XRP Ledger API server optimized for HTTP and WebSocket API calls, is now available. This release adds bug fixes. diff --git a/blog/2025/clio-2.4.0.md b/blog/2025/clio-2.4.0.md index 5612f60cfc..a3b980bc0f 100644 --- a/blog/2025/clio-2.4.0.md +++ b/blog/2025/clio-2.4.0.md @@ -11,8 +11,7 @@ markdown: editPage: hide: true --- - -## Introducing Clio version 2.4.0 +# Introducing Clio version 2.4.0 Version 2.4.0 of Clio, an XRP Ledger API server optimized for HTTP and WebSocket API calls, is now available. This release adds bug fixes. diff --git a/blog/2025/defi-use-cases-exploring-the-potential.md b/blog/2025/defi-use-cases-exploring-the-potential.md index d9eed0da2d..264ee32fae 100644 --- a/blog/2025/defi-use-cases-exploring-the-potential.md +++ b/blog/2025/defi-use-cases-exploring-the-potential.md @@ -1,6 +1,7 @@ --- category: 2025 -date: 2025-04-18 +date: "2025-04-18" +template: '../../@theme/templates/blogpost' seo: description: What is DeFi used for, and how is it reshaping industries? Explore the key DeFi use cases that are driving the future of finance. labels: diff --git a/blog/2025/vulnerabilitydisclosurereport-bug-apr2025.md b/blog/2025/vulnerabilitydisclosurereport-bug-apr2025.md index e1580ecd95..0613d7af87 100644 --- a/blog/2025/vulnerabilitydisclosurereport-bug-apr2025.md +++ b/blog/2025/vulnerabilitydisclosurereport-bug-apr2025.md @@ -1,6 +1,7 @@ --- category: 2025 -date: 2025-04-28 +date: "2025-04-28" +template: '../../@theme/templates/blogpost' seo: title: Malicious Supply Chain Compromise in xrpl.js npm Package description: This disclosure report contains technical details of vulnerability of the XRP Ledger Javascript library package hosted at npmjs.com. @@ -27,7 +28,7 @@ This attack was discovered and reported in the early morning hours of April 22nd ## Impact -This vulnerability does **not** affect the XRP Ledger network or codebase, but is instead limited to the npm package called `xrpl`, which is the package name for the **xrpl.js** (a JavaScript library for interacting with the XRP Ledger). +This vulnerability does **not** affect the XRP Ledger network or codebase, but is instead limited to the npm package called `xrpl`, which is the package name for **xrpl.js** (a JavaScript library for interacting with the XRP Ledger). **Note:** No GitHub repositories were compromised at any time as part of this incident. Instead, the attacker was able to publish malicious code directly into the npm registry system using compromised npm credentials. In particular, npm versions `2.14.2` and `4.2.1` - `4.2.4` of xrpl.js were compromised with malicious code designed to exfiltrate private key material.