A widely used npm package got hijacked this month and shipped an infostealer to anyone who installed it. It swept browser sessions, password vaults, crypto wallets and seed phrases, and even config files for AI coding tools, all from the machine it ran on. The uncomfortable part for anyone in crypto: a seed phrase or a software wallet sitting on a connected dev or daily-driver machine is inside reach of whatever else runs there. The thing that stays out of range is a key that was generated offli
CryptoAlerta — análise de criptomoedas e mercado em tempo real