A supply chain attack has compromised 1inch and other platforms through malicious code in a popular animation library, risking users' funds and data.