Massive npm Supply Chain Attack: Crypto Wallets at Risk

A major supply chain attack has compromised a trusted npm JavaScript account, putting millions of crypto users at risk. Hackers used fake websites to steal the account and inject malicious code into popular JavaScript packages that have been downloaded over 2 billion times since last week. This attack is designed to secretly redirect cryptocurrency transactions without user knowledge, even if they sign the transaction correctly.