Malicious Code Injection Detected in Popular npm Packages

According to PANews, renowned developer qix has fallen victim to a phishing attack, resulting in the injection of malicious code into several npm packages. The affected packages include chalk, strip-ansi, and color-convert. The attack method involved hooking wallet functions, altering ETH/SOL transaction recipient addresses, and replacing addresses in network responses. Users are advised to verify recipient and amount details on wallet interfaces, check for address changes after pasting, review recent transactions, and prioritize using hardware wallets for high-value operations.