Malicious npm Package Discovered in AI-Assisted Code Commit Targets Crypto Wallets (infosecurity-magazine.com)

• Malicious npm dependency inserted via AI-assisted code commit.
• Targets crypto wallet credentials and private keys.
• Highlights supply chain vulnerability from AI-generated code.

"Researchers identified a malicious npm dependency introduced via an AI-assisted code commit. The package steals sensitive data and exposes cryptocurrency wallets. This incident highlights supply chain risks amplified by generative AI tools."