Malware-poisoned versions of the widely used JavaScript library @solana/web3.js were distributed via the npm package registry, according to an advisory issued Wednesday by project maintainer ...

Backdoor slipped into popular code library, drains ~$155k from digital wallets Solana-web3.js code library drains private keys, giving access to user wallets.

The legitimate Solana JavaScript SDK was temporarily compromised yesterday in a supply chain attack, with the library backdoored with malicious code to steal cryptocurrency private keys and drain ...

Beyond the usual quick tips, let's look at both the business case and the technical side of keeping React bundles lean.