JavaScript packages with billions of downloads were compromised by an unknown threat actor looking to steal cryptocurrency.

A JavaScript supply chain attack has delivered a crypto-clipper via 18 npm packages; Ledger’s CTO has warned ...