Malicious connect wallet pop up. (I think i'm being hacked)

itsdoleey · 2024-10-30T21:38:21.616Z

When I click on the menu on my website, it displays “Connect Wallet” and then lists different cryptocurrency platforms. My website has no connection to cryptocurrency, nor have I attempted to incorporate it in any way. As far as I know, I’m the only one with access.

In reviewing the workflow associated with the menu icon, I see only one action: Toggle “GroupFocusMenu.” I’m unsure what’s causing this or if anyone else has encountered a similar issue.

I also used Bubble’s step-by-step debugger, which doesn’t show anything related to that popup.

I’ve seen some Reddit posts suggesting it might be malware, but I haven’t found a resolution yet.

georgecollier · 2024-10-30T21:40:22.320Z

Megathread: Lottiefiles plugin / canvasUI compromised (crypto popups in apps) Bugs

If I have an existing script/style in this section (put in automatically by the Canvas template), do I put this in addition to, or replace?

itsdoleey · 2024-10-30T21:42:17.952Z

image448×868 39.1 KB

These are all the plug-ins i have connected because someone mentioned in the reddit thread that it could be a faulty plug-in but all of these seem to be from reputable sources.

johnny · 2024-10-30T21:48:18.219Z

It’s a library called Lottie that some plugins use including AirDev’s UI elements: Megathread: Lottiefiles plugin / canvasUI compromised (crypto popups in apps)

JustinC · 2024-10-30T21:55:56.081Z

Getting this too all of a sudden. All agents and users. Something is up @bubble

fede.bubble · 2024-10-30T22:22:28.458Z

Continue discussion in megathread, thanks!