Security News Ghost Campaign Uses 7 npm Packages to Steal Crypto Wallets and Credentials TheHackerNews Daniel Bender 24 Mar 2026 7 malicious npm packages steal crypto wallets by phishing sudo passwords via fake installs, leading to RAT deployment and credential exfiltration.