npm packages with 2.6 billion weekly downloads hijacked—attackers inject browser malware to steal crypto, replacing wallet addresses in 18 major libraries

run this if you're on a mac to check for packages that are compromised with malware https://x.com/w00tcake/status/1965127958735274137

Top comment by @w00tcake

More coverage

• npm Supply Chain Attack: Multiple Popular Packages Hijacked (1B+ ... (safedep.io)
• Popular npm packages compromised | Kaspersky official blog (kaspersky.com)
• Breakdown: Widespread npm Supply Chain Attack Puts Billions of ... (paloaltonetworks.com)
• npm Supply Chain Attack: Massive Compromise of debug, chalk ... (upwind.io)
• 18 Popular Code Packages Hacked, Rigged to Steal Crypto (krebsonsecurity.com)

Explore the topic

• npm
• Security
• malware