Get all your news in one place.
100's of premium titles.
One app.
Start reading
Tom’s Hardware
Tom’s Hardware
Technology
Nathaniel Mott

JavaScript packages with billions of downloads were injected with malicious code in world's largest supply chain hack, geared to steal crypto — a phishing email is all it took to undermine npm packages

NPM Crypto Supply chain Thanos Cryptocurrency
Shutterstock_2210295717.

A total of 18 JavaScript packages that have over 2 billion weekly downloads have been injected with malicious code in what is billed as the largest supply chain hack in history. The compromised code was designed to steal cryptocurrency.

Picture this: Thanos, a Death-obsessed maniac retconned within the Marvel Cinematic Universe to be the most radical environmental activist in history, has assembled the Infinity Gauntlet. With it, he could wipe out half the universe's population. He raises his hand, snaps his fingers, and... steals a bunch of cryptocurrency instead. The Infinity Gauntlet would still be a problem, sure, but wouldn't that first snap come as a relief?

Sign up to read this article
Read news from 100's of titles, curated specifically for you.
Already a member? Sign in here
Related Stories
Top stories on inkl right now
One subscription that gives you access to news from hundreds of sites
Already a member? Sign in here
Our Picks
Does your sleep tracker get it right? A Pittsburgh neuroscientist weighs in
On a typical night, I go to bed wearing a tracking watch on one wrist and another type of tracker on the other wrist. Then I compare their sleep findings while I drink my morning coffee.
The Conversation
The Conversation
There's A Reason Taxi Cabs Are Almost Always Yellow
Yellow taxis are easy to spot in traffic, but the color's history goes far beyond simple visibility.
Motor1
Motor1
How ‘technoference’ can disrupt parent-child connections
Have you ever been telling someone a story when their phone lights up, and their eyes flicker toward their device?
The Conversation
The Conversation
Holding Lightning by Emily Lordi review – an intimate portrait of Whitney Houston
An empathetic biography of the the singer recasts her tumultuous later career as a triumph of self-expression
The Guardian - UK
The Guardian - UK
Brian May says Queen are retiring from live tours: ‘Maybe 50 years is enough’
Rock guitarist suggested creating an interactive experience for fans similar to the ‘Abba Voyage’ show
The Independent UK
The Independent UK
"Lanterns" finds its power in fear
To fulfill his destiny, John Stewart embraces what he was trained to reject — and so should we
Salon
Salon
Fourteen days free
Download the app
One app. One membership.
100+ trusted global sources.
Download on the AppStore Get it on Google Play