Passwordstate was Compromised by Supply-Chain Attack
As many as 29,000 users of Passwordstate password manager downloaded a malicious update that extracted data from the app and sent it to an attacker-controlled server, Click Studios told customers. Ars Technica reported that this was a supply-chain attack. Click Studios began developing Passwordstate in March of 2004, and released it in August that same year. According to Click Studios,