Security researchers found malware packages using the Ethereum blockchain to conceal malicious commands on GitHub repos.

Overview Solidity leads dApp development with a strong ecosystem and massive developer supportRust, Move, and Cairo offer speed, safety, and scalability for nex ...

Malware targeting Ethereum smart contracts is not entirely new. Earlier this year, the North Korean-affiliated Lazarus Group ...

Simple-looking code tapped Ethereum’s blockchain to fetch hidden URLs that directed compromised systems to download ...

Two npm packages hide downloader commands via Ethereum smart contracts; uploaded July 2025; targeting crypto developers.

Ethereum smart contracts are being used to download malware via poisoned NPM packages, something Binance has linked to DPRK ...

ReversingLabs' research identified the npm packages clortoolv2 and mimelib2, which used Ethereum smart contracts to hide ...

In contrast, colortoolsv2 and mimelib2 leveraged Ethereum smart contracts to store and deliver the URLs used for fetching the ...

Ethereum smart contracts, a backbone of the blockchain ecosystem, are under attack. Hackers are now exploiting ETH to hide ...

ReversingLabs discovered two NPM packages, colortoolsv2 and mimelib2, using Ethereum smart contracts to download malware.

Hackers use Ethereum smart contracts to hide malware in NPM packages, launching a stealthy crypto-themed supply chain attack.