The recommended Ripple cryptocurrency NPM JavaScript library named
"xrpl.js" was compromised to steal XRP wallet seeds and private
keys and transfer them to an attacker-controlled server, allowing
threat actors to steal all the funds stored in the wallets. [...]