Security researchers claim to have discovered the first-ever open source supply chain attack combining blockchain technology with traditional attack vectors. Checkmarx said it found the malicious “jest-fet-mock” package on npm.

Source: Infosecurity