JavaScript packages with billions of downloads were injected with malicious code in world's largest supply chain hack, geared to steal crypto — a phishing email is all it took to undermine npm packages
Yet all the attacker did was attempt to steal cryptocurrency
Tom's Hardware