Phishing attack on developer Qix compromises npm packages

9-9-2025 – Renowned developer Qix has been targeted in a phishing attack, leading to malicious code being injected into popular npm packages, including chalk, strip-ansi, and color-convert, according to a security alert from npm. The attack, first reported by BleepingComputer, manipulated wallet functions to alter Ethereum (ETH) and Solana (SOL) transaction recipient addresses and tampered [. . source: https://www.cointrackdaily.com/phishing-attack-on-developer-qix-compromises-npm-packages/