The cryptocurrency development community is facing a serious supply chain threat after five malicious npm packages were discovered stealing private wallet keys and forwarding them directly to a Telegram bot. Published under the npm account “galedonovan,” these packages were crafted to look like trusted libraries that Solana and Ethereum developers rely on every day. Once […] The post Five Malicious npm Packages Target Crypto Developers, Exfiltrate Wallet Keys via Telegram appeared first on Cyber Security News.