A Web3 library shipped malware to npm with valid provenance. Block install scripts you never reviewed.
A Web3 library was found shipping malware to npm with valid provenance, and the article advises blocking install scripts that have not been reviewed.














