According to @cookiedotfun, most projects showing Bad Sentiment today were linked to the recent NPM supply chain attack based on signals in their profiles' Latest Buzz sections (source: Cookie DAO on X, Sep 9, 2025). Cookie DAO detailed that the incident involved malicious code injected into NPM packages and noted a rapid containment by security researchers and the NPM security team (source: Cookie DAO on X, Sep 9, 2025). Early figures shared by Cookie DAO indicate affected packages collectively see over 2 billion weekly downloads, yet confirmed direct financial losses were under $500, implying limited immediate on-chain damage for crypto projects (source: Cookie DAO on X, Sep 9, 2025). Cookie DAO also reported that multiple crypto projects publicly confirmed no impact, with overall exposure limited despite short-term sentiment pressure (source: Cookie DAO on X, Sep 9, 2025).