Massive NPM Hack Unleashes Crypto-Stealing Malware

A sophisticated cyberattack has compromised the NPM (node package manager) account of developer ‘qix’, resulting in the publication of malicious versions of his widely used JavaScript packages, impacting millions globally. This attack constitutes a major breach in the software supply chain targeting the popular JavaScript/Node.js ecosystem. 1 billion weekly downloads across dozens of essential packages have been affected by this security vulnerability.