Security always comes first which is why we’re advising our community to please be aware that a supply chain attack compromised the NPM account of a known developer, leading to malicious versions of dozens of high-impact packages being published.
The malware is a crypto-clipper that steals funds by swapping wallet addresses in network requests and directly hijacking crypto transactions.