A supply chain attack targeted Lottie Player, a popular JS library used by many websites.Unauthorized versions of Lottie Player contained code that prompted users to connect their crypto wallets.The LottieFiles team has taken immediate action by publishing a new safe version and removing compromised package versions.The attack impacted major decentralized applications (Dapps) like 1inch, and a user reportedly lost 10 Bitcoins due to the attack.