A significant JavaScript supply chain attack has compromised over 400 packages, including at least 10 crucial to the crypto industry, according to HashNews. Aikido Security's Charlie Eriksen discovered the malicious packages, which are infected with the Shai Hulud malware. This malware targets developer infrastructure and is capable of stealing wallet keys. The attack has impacted ENS-related libraries such as content-hash, address-encoder, and ensjs, which collectively see tens of thousands of weekly downloads. Wiz researchers reported that over 25,000 codebases have been affected, with the number increasing by 1,000 every 30 minutes. Eriksen highlighted that the scale of this attack surpasses previous incidents.