Malicious Code Libraries Target JavaScript Developers via Blockchain

Researchers have discovered hundreds of malicious code libraries on NPM that attempt to install malware on developers' machines. These packages use typosquatting to trick developers into downloading them, and they connect to IP addresses stored on the Ethereum blockchain to fetch additional malicious files and send system information back to the attackers. The campaign highlights the importance of verifying package names before installation to avoid such threats.