Join Our Telegram channel to stay up to date on breaking news coverageAn NPM (Node Package Manager) supply chain attack has prompted Ledger Chief Technology Officer Charles Guillemet to urge crypto users to pause on-chain transactions. “There’s a large-scale supply chain attack in progress: the NPM account of a reputable developer has been compromised,” Guillemet wrote on X. How The NPM Attack HappenedNPM is the default package manager for Node.js, which is the runtime environment for the JavaScript programming language. In simple terms, NPM is a large online registry that contains millions of open-source JavaScript packages and modules that any developer can use. NPM Hackers Have Only Stolen $500 So FarInitially, the impact of the NPM attack seemed almost negligible, with reports that the hackers only stole $0.05 from the incident.