Plot to steal cryptocurrency foiled by NPM

Yesterday, the npm, Inc. security team, in collaboration with Komodo, helped protect over $13 million USD in cryptocurrency assets as we found and responded to a malware threat targeting the users of a cryptocurrency wallet called Agama. This attack focused on getting a malicious package into the build chain for Agama and stealing the wallet seeds and other login passphrases used within the application. The GitHub user published this commit on Mar 8th which added as a dependency to the EasyDEX-GUI application (which is used as part of the Agama wallet).

Source: blog.npmjs.org