LottieFiles Issues Warning About Compromised “lottie-player” npm Package – [email protected] (The Hacker News)

– [[{“value”:”LottieFiles has revealed that its npm package “lottie-player” was compromised as part of a supply chain attack, prompting it to release an updated version of the library.
“On October 30th ~6:20 PM UTC – LottieFiles were notified that our popular open source npm package for the web player @lottiefiles/lottie-player had unauthorized new versions pushed with malicious code,” the company said in a”}]]  – Read More  – The Hacker News