Security News Malicious npm Package nodejs-smtp Mimics Nodemailer, Targets Atomic and Exodus Wallets TheHackerNews Daniel Bender Sep 2, 2025 Malicious npm package nodejs-smtp, downloaded 347 times since April 2025, hijacks Atomic and Exodus wallets.