Dev snared in crypto phishing net, 18 npm packages compromised
· Source: theregister.com
In short
A developer fell victim to a phishing email, allowing attackers to compromise 18 npm packages with malware targeting cryptocurrency transactions. The packages, including popular ones like debug and chalk, account for about two billion weekly downloads, making this one of the largest software supply chain attacks on npm. The malicious code silently intercepts crypto and web3 activity in browsers to redirect funds to attacker-controlled accounts.
Read Original Article — Read the full article on the publisher’s site.
In the issue of week 37, 2025: AI-Driven Automation and Decision Systems Slash Costs, Boost Supply Chain Resilience
Tags: security, phishing, supply-chain, npm, cryptocurrency, malware