News Major npm maintainer hijacked in supply‑chain attack that republished packages to steal crypto npm supply chain attack compromised a major maintainer and republished packages to swap crypto wallet addresses—financial loss was small but security costs are significant. byadminSeptember 9, 2025