case-study Ledger Connect Kit Supply Chain Attack: How a Single Compromised npm Account Drained $600K Across the EVM Ecosystem A phished ex-employee's NPMJS credentials turned a trusted frontend library into a cross-chain wallet drainer.