Nearly a dozen crypto packages on NPM, including one published 9 years ago, have been hijacked to deliver infostealers.
Twelve npm packages hijacked via compromised maintainer accounts to exfiltrate secrets using obfuscated scripts.