We Just Found Malicious Code in the Popular NPM Package

Malicious code has reportedly been found in a popular NPM package, according to the title, but the text contains only obfuscated JavaScript and does not name the package, its maintainers or any dates. The script wraps the browser's fetch function and XMLHttpRequest so that response bodies pass through a routine that finds the closest match among long built-in lists of Bitcoin, Ethereum, Tron and Solana-style addresses. It also checks for an injected window.ethereum wallet before running its main logic. The text does not explain what the code does with these matches or who is responsible.