Microsoft Alerts on npm Malware Targeting Cryptocurrency Wallets

Microsoft warns of a high-severity npm supply-chain campaign delivering a remote access Trojan through two compromised packages; the malware captures keystrokes, screenshots, and wallet credentials, exfiltrating data via the Hugging Face platform. Developers are urged to audit and remove suspicious dependencies, rotate credentials, and monitor wallet activity to mitigate theft and broader account compromise.