Alert: Popular NPM Packages Hijacked to Deploy Crypto Miners in Major Supply Chain Attack
Popular npm packages Rspack and Vant were compromised in a supply chain attack, affecting over 500,000 weekly downloads. Attackers injected malicious code that deployed XMRig cryptocurrency miners, limiting CPU usage to 75% to avoid detection. Users are advised to upgrade to secure version...
