NPM Supply Chain Compromise Threatens JavaScript Crypto Ecosystem

A pervasive supply chain attack on NPM accounts injects malicious code, covertly swapping cryptocurrency addresses during user-approved transactions.