A significant supply chain attack on JavaScript software libraries has resulted in the theft of less than $50 in cryptocurrency, according to Security Alliance. Hackers infiltrated the node package manager (NPM) account of a prominent developer, injecting malware into widely-used JavaScript libraries downloaded over a billion times. Despite targeting Ethereum and Solana wallets, the breach has so far resulted in minimal financial loss, with only $50 stolen, primarily in Ether and a memecoin. The attack involved a crypto-clipper malware that alters wallet addresses during transactions to redirect funds. The breach affected packages like chalk, strip-ansi, and color-convert, potentially exposing numerous projects. Security experts, including Ledger's CTO Charles Guillemet, have advised caution when confirming onchain transactions. The situation is ongoing, with updates expected as more information becomes available.