Although most developers use GitHub to organize and share open-source code, funds like Coinbase Ventures, Distributed Global and Digital Currency Group are betting on a crypto-native alternative.

Malware-poisoned versions of the widely used JavaScript library @solana/web3.js were distributed via the npm package registry, according to an advisory issued Wednesday by project maintainer Steven ...