According to Guillemet, the malicious code - already pushed into packages with over 1 billion downloads - is designed to silently swap crypto wallet addresses in transactions. That means unsuspecting users could send funds directly to the attacker without realizing it.
Please to comment