1. 1

A JavaScript supply chain attack has delivered a crypto-clipper via 18 npm packages; Ledger’s CTO has warned non-hardware-wallet users.

  1.