Post

This is starting to look like this may have significant implications. 18 popular packages affected so far. www.bleepingcomputer.com/news/securit...

bleepingcomputer.comHackers hijack npm packages with 2 billion weekly downloads in supply chain attackIn a supply chain attack, attackers have injected malware into NPM packages with over 2.6 billion weekly downloads after compromising a maintainer's account in a phishing attack.

8/9/25, 9:34 pm0 reposts4 likes

SeanWrightSec

@seanwrightsec.com

8 Sept 2025

So this does look to have limited impact. Looks to only target cryptocurrency, and the window for downloading most of the malicious packages is only a few hours.