Trivia: The postinstall scripts you run during npm install may be secretly snooping through your ~/.ssh files and wallet seed phrases.

CryptoWorld News reports that Microsoft warns attackers have hidden malware in public npm packages to steal cryptocurrencies, posing new risks to developers and wallet users. Microsoft Threat Intelligence states that two compromised npm packages ([email protected] and [email protected]) are abusing Hugging