A major JavaScript supply chain attack targeting crypto wallets through compromised GitHub packages has stolen only $1,043.

By default, malicious repositories run automatically when a folder is opened, putting developer machines and sensitive ...