Crypto wallets targeted in widespread hack of npm, GitHub

Security researchers report a widespread phishing-driven supply-chain campaign that compromised numerous npm and GitHub maintainer accounts (including the ~qix account), injecting heavily obfuscated JavaScript into popular packages that monitors wallet interactions and replaces recipient addresses with attacker-controlled "drainer" wallets; multiple packages with billions of downloads were affected and researchers have identified related malicious files, hashes, phishing domains, and wallet addresses.