The NPM attack was a supply‑chain compromise that pushed malicious updates to popular libraries, enabling crypto‑clipper payloads that spoof wallet addresses across Bitcoin, Ethereum, Solana and others. Developers must rollback