Aikido Security detected a series of packages being pushed to npm that appeared to contain malicious code, according to a post by Charlie Eriksen, a security researcher with the firm.
These were 18 popular packages with more than 2 billion downloads per week, according to Eriksen.
“The packages were updated to contain a piece of code that would be executed on the client of a website, which silently intercepts crypto and web3 activity in the browser, manipulates wallet interactions, and rewrites payment destinations so that funds and…

![[CITYPNG.COM]White Google Play PlayStore Logo – 1500×1500](https://startupnews.fyi/wp-content/uploads/2025/08/CITYPNG.COMWhite-Google-Play-PlayStore-Logo-1500x1500-1-630x630.png)