Year-Long Supply Chain Attack: Malicious NPM Package Compromises Cryptocurrency Wallets

The Checkmarx Security Research Team has uncovered a year-long supply chain attack involving the malicious NPM package @0xengine/xmlrpc. What began as a legitimate XML-RPC implementation in October 2023 morphed into...