Lottie Player was used to spread malicious wallet drainer links. The widely used library was infected with malicious versions, after someone used a compromised developer key for publication rights to NPM.