>Nth npm supply chain attack, possibly largest in history (src)
>extremely narrow scope (only affects frontend code for websites that deal with crypto)
>the payload has misconfigured destination addresses so they aren't even getting the money (src)
congratulations to the phishermen for executing the worst fumble of all time

apartment simplex