Large-Scale Supply Chain Attack on NPM Threatens JavaScript Ecosystem

TL;DR;

A large-scale supply chain attack is in progress targeting the JavaScript ecosystem through a compromised NPM account. Affected packages have been downloaded over 1 billion times, potentially putting the entire ecosystem at risk. The malicious payload silently swaps crypto addresses to steal funds.