A supply chain attack compromised an npm package used by dozens of DeFi front-ends simultaneously.

Supply chain attacks targeting JavaScript dependencies are a growing threat to Web3 application security.