npm malware AI-Generated npm Wallet Drainer Exposes Supply Chain Catastrophe The package literally advertised itself as an 'enhanced stealth wallet drainer' in its own source code, and npm still served it up for days.