case-study
Silent Swap: The JavaScript Supply Chain Attack That Weaponized the World's Most Downloaded Packages Against Crypto Users
A single phished developer credential turned billion-download npm packages into multi-chain wallet address hijacking infrastructure.