Malicious npm Packages Steal Crypto Wallet Keys via Telegram Bot
Malicious npm packages targeting crypto developers are actively stealing Solana and Ethereum wallet keys by exfiltrating them directly to a Telegram bot. Security researchers at Socket identified five typosquatted libraries that intercept private keys during standard decoding processes....