Security News LottieFiles hit in npm supply chain attack targeting users' crypto BleepingComputer Daniel Bender Oct 31, 2024 LottieFiles announced that specific versions of its npm package carry malicious code that prompts users to connect their cryptocurrency wallets so they can be emptied.