Read more https://thehackernews.com/2025/04/malicious-npm-package-targets-atomic.html
Malicious npm Package Targets Atomic Wallet, Exodus Users by Swapping Crypto Addresses
Threat actors are continuing to upload malicious packages to the
npm registry so as to tamper with already-installed local versions
of legitimate libraries to execute malicious code in what's seen as
a sneakier attempt to stage a software supply chain attack. The
newly discovered package, named pdf-to-office, masquerades as a
utility for converting PDF files to Microsoft Word documents. But,
in
Pensée du jour :
Ce que l'homme a fait ,
l'homme peut le défaire.
"No secure path in the world"
