socket.dev/blog/supply-chain-a
Perfect example of why you need a hermetic build 😆
Though even the fact of "building a cryptocurrency in js with npm" sounds wild to me.