Ethereum smart contracts quietly push javascript malware targeting developers
Hackers are utilizing Ethereum smart contracts to hide malware payloads inside seemingly benign npm packages, a tactic that turns the blockchain right into a resilient command channel and complicates takedowns. ReversingLabs detailed two npm packages, colortoolsv2 and mimelib2, that learn a contract on Ethereum to fetch a URL for a second-stage downloader fairly than hardcoding…
