Damage likely limited to those running bots with private PKI access Malware-poisoned versions of the widely used JavaScript library @solana/web3.js were distributed via the npm package registry ...