Malware-poisoned versions of the widely used JavaScript library @solana/web3.js were distributed via the npm package registry, according to an advisory issued Wednesday by project maintainer ...

Web3 developer Brian Guan lost $40,000 after accidentally making his wallet keys public on GitHub.