bee-js 13.3.0 had valid provenance, a real release bot, and a wallet stealer. GitHub Actions did exactly what it was told
No npm token was stolen. The release bot published the attacker’s commit through the legitimate workflow, with genuine SLSA provenance. Check lockfiles for 13.3.0, pin 13.2.0, and audit your own release path.