Equation of Compromise: Anatomy of a Live npm Supply-Chain Campaign

Reported 22 Sep 2026 by otx · Severity: medium

A sophisticated six-month campaign targeting quantitative and DeFi developers through malicious npm packages disguised as legitimate mathematics libraries. The operation employs encrypted loaders that trigger only when specific cryptographic operations are performed, specifically