Charles Guillemet says a phishing led supply-chain breach could have become a systemic disaster for crypto users.

JavaScript packages with billions of downloads were compromised by an unknown threat actor looking to steal cryptocurrency.