Security News Malicious npm Package nodejs-smtp Mimics Nodemailer, Targets Atomic and Exodus Wallets TheHackerNews Daniel Bender 02 Sep 2025 Malicious npm package nodejs-smtp, downloaded 347 times since April 2025, hijacks Atomic and Exodus wallets.