The malicious JavaScript code ("bundle.js") injected into each of the trojanized package is designed to download and run ...

Charles Guillemet, Chief Technology Officer at Ledger, emphasized the gravity of the situation, stating, "There’s a large-scale supply chain attack in progress: the NPM account of a reputable ...