Though the now contained npm attack resulted in nearly zero losses, experts say the incident highlights the risk of future attacks, given the “many dependencies and vulnerabilities in the crypto supply chain.” Read more: (The Defiant)