A massive supply chain breach has compromised over 400 NPM packages in what security researchers are calling a worm-style propagation attack. The incident specifically targeted critical infrastructure, affecting major ENS libraries and several widely-used crypto development tools. Attackers managed to exfiltrate developer authentication credentials along with private wallet keys, potentially exposing both project codebases and user funds. The attack vector appears to leverage dependency chains, allowing malicious code to spread automatically across connected packages. Development teams relying on affected libraries are urged to rotate credentials immediately and conduct thorough security audits of their deployment environments.