🚨 20 npm packages with 2 BILLION+ weekly downloads (incl. chalk & debug) were hacked.

A maintainer was phished into giving up 2FA — attackers slipped in malware that hijacks wallets & steals crypto. #CyberSecurity #MalwareAttacks https://thehackernews.com/2025/09/20-popular-npm-packages-with-2-billion.html

20 Popular npm Packages With 2 Billion Weekly Downloads Compromised in Supply Chain Attack

20 npm packages with 2B weekly downloads compromised after maintainer phishing led to crypto-stealing malware.

The Hacker News