Ethereum smart contracts used to push malicious code on npm

mishaderidder.eth · 2025-09-04T20:13:57.000Z

RL discovered how the contracts were abused — and how this incident is part of a larger campaign to promote malicious packages on top repositories.

Back

Join our TG SubmitDisconnect

Ethereum smart contracts used to push malicious code on npm

reversinglabs.com

Ethereum smart contracts used to push malicious code on npm

by mishaderidder.eth13093 🥝 • 1y

rvolz.eth

The title seems to be a bit misleading:

What is new and different is the use of Ethereum smart contracts to host the URLs where malicious commands are located downloading the second stage malware.

Characters remaining: 10,000

comment guidelines

Ethereum smart contracts used to push malicious code on npm

More from reversinglabs.com on Kiwi News