New NPM Supply Chain Campaign Identified : A Multi-Stage Cryptocurrency Malware with More Than 2.7 million Downloads

A sophisticated supply chain attack leveraging eleven malicious npm packages—including one with over 2.7 million downloads—targeted blockchain and Web3 developers to steal cryptocurrency credentials, deploy multi-stage malware, and exfiltrate secrets via both traditional and blockchain-based channels, underscoring the urgent need for rigorous dependency auditing and supply chain vigilance.