Hardware Airgapp signer always!!

wallets that don't properly version pin are displaying criminal negligence.

TFW when prolific open source devs get phished

npm debug and chalk packages compromised

The popular packages debug and chalk on npm have been compromised with malicious code

We are probably arriving at the point where third party dependencies would need to be hosted locally with running code to limit messes like this. Supply chain attacks are the worst