The XRP Ledger Foundation said there is a potential vulnerability in recent versions of the XRPL JavaScript library used to build apps and urges impacted projects to update to patched versions of the code. The issue was discovered by Aikido Security malware researcher Charlie Eriksen who said this “backdoor” could lead to a “potentially catastrophic” supply chain attack.