Security researchers from Reversing Labs find two malicious packages on npm These serve as downloaders and target software developers building on the Ethereum blockchain The malware opens a reverse ...

Malicious npm package targets wallet addresses in Atomic and Exodus, stealing crypto through fake PDF tool downloads.

Researchers found malicious packages on the npm registry that ... provider-jsonrpc.js file to include malicious code that, when run, downloads and executes a third-stage malware payload.