Compromised dYdX npm and PyPI packages delivered wallet-stealing malware and a RAT via poisoned updates in a software supply chain attack.

Your trusted extension/add-on with over 100k review might be spying on you.

Listening to the news can feel like a journey. But 1A guides you beyond the headlines – and cuts through the noise. Let's get to the heart of the story, together – on 1A. February 11, 2026 • Thousands ...