Ledger CTO Warns of NPM Supply-Chain Attack Hitting 1B+ Downloads

The Chief Technology Officer of Ledger has issued a warning regarding a potential supply-chain attack targeting the Node Package Manager (NPM), which could affect over one billion downloads, raising significant concerns about the security and integrity of software dependencies in the development community. This alarming situation highlights the vulnerability of widely-used software packages, emphasizing the need for heightened vigilance and robust security measures to protect developers and users alike from malicious threats. source: https://www.coindesk.com/tech/2025/09/08/ledger-cto-warns-of-npm-supply-chain-attack-hitting-1b-downloads