The NPM supply chain exploit is a large-scale compromise of reputable JavaScript packages that can silently swap crypto addresses during transactions and steal funds. Users should avoid signing transactions, audit