NPM malware leads to crypto losses

Hackers disguise malware in npm packages via Ethereum smart contracts – new supply chain attacks threaten developers.