Malicious packages infiltrate developer tools, exposing crypto wallets and systems to theft and remote control.
Malicious npm and PyPI packages targeting dYdX exposed thousands to wallet theft and remote access malware in a chilling reminder of open-source supply chain risks.