Trojan npm package steals crypto by faking nodemailer
A malicious npm package, nodejs-smtp, poses as nodemailer but secretly injects code into Atomic Wallet on Windows, rerouting Bitcoin, Ethereum, and other cryptocurrency transactions to the attacker’s wallets without alerting the user.
Source: Socket
Read more: CyberSecBrief












