A recent NPM supply chain hack compromised a maintainer's account via phishing, injecting malware into packages with over 2.6 billion weekly downloads. The attack targets web3 wallets like MetaMask and Phantom, hijacking crypto transactions by replacing destination addresses, though hardware wallets remain secure. Despite fears reducing on-chain volume, Bitcoin rose 1.4% to $113,000. The hacker has stolen only around $500, mostly in meme coins.