An escalating npm supply chain attack has compromised dozens of foundational JavaScript packages to spread malware and drain crypto wallets.

Security experts have warned that a newly discovered supply chain attack targeting npm packages is still active and may ...