Close Menu
Altcoin ObserverAltcoin Observer
  • Regulation
  • Bitcoin
  • Altcoins
  • Market
  • Analysis
  • DeFi
  • Security
  • Ethereum
Categories
  • Altcoins (1,914)
  • Analysis (2,082)
  • Bitcoin (2,678)
  • Blockchain (1,615)
  • DeFi (1,912)
  • Ethereum (1,915)
  • Event (64)
  • Exclusive Deep Dive (1)
  • Landscape Ads (2)
  • Market (1,957)
  • Press Release (2)
  • Press Releases (6)
  • Reddit (1,328)
  • Regulation (1,827)
  • Security (2,554)
  • Thought Leadership (3)
  • Uncategorized (2)
  • Videos (43)
Hand picked
  • SEC Blunder Wipes Former Chair Gensler’s Texts from Key Crypto Period
  • Bitcoin price prediction: can BTC reach $ 200,000 by the end of the year or $ 180,000 in 2025?
  • Ripple includes $ 25 million in stable to support companies and American veterans
  • Canary fixes of 0.95% costs for Litecoin andf spot
  • Stop dreaming of the lottery. Join H mining and start winning!
We are social
  • Facebook
  • Twitter
  • Instagram
  • YouTube
Facebook X (Twitter) Instagram
  • About us
  • Disclaimer
  • Terms of service
  • Privacy policy
  • Contact us
Facebook X (Twitter) Instagram YouTube LinkedIn
Altcoin ObserverAltcoin Observer
  • Regulation
  • Bitcoin
  • Altcoins
  • Market
  • Analysis
  • DeFi
  • Security
  • Ethereum
Events
Altcoin ObserverAltcoin Observer
Home»Blockchain»The malicious NPM packages use Ethereum blockchain for the delivery of malicious software
Blockchain

The malicious NPM packages use Ethereum blockchain for the delivery of malicious software

September 4, 2025No Comments
Share Facebook Twitter Pinterest LinkedIn Tumblr Reddit Telegram Email
4050956 0 93667700 1756933422 shutterstock 712558591 100963102 orig.jpg
Share
Facebook Twitter LinkedIn Pinterest Email


NPM as a layer of obfuscation for the GitHub campaign

Deslab reversion researchers colortoolsv2 And mimelib2 This used Ethereum intelligent contracts for the delivery of malware in July. But little efforts were devoted to that these packages are legitimate and attractive for developers to include in their projects, which is generally the objective of supply chain attacks with NPM VOYOUS plans.

THE colortoolsv2 Package – and the mimelib2 Whoever replaced it later – only contained the files necessary to implement malware. As the researchers discovered it later, this was due to the fact that they were part of a wider coordinated campaign, the objective of which was to encourage users to execute the code from false GitHub standards which would then download the NPM packages automatically in the form of dependencies.

The Snape Github standards claimed to be for automated cryptocurrency trading robots and were designed to appear legitimate. They seemed to have several active contributors, thousands of code of code and several stars, but these were all faked with SOCCPPPET accounts created roughly at the same time as the NPM packages appeared.



Source link

Share. Facebook Twitter Pinterest LinkedIn Tumblr Email
Previous ArticleBitcoin, Ethereum open to open interest are near ATH levels, what happened the last time?
Next Article Which holds Dex and resolve it

Related Posts

Blockchain

The blockchain lender figure appears in the public beginnings while the crisis in the IPO of the crypto continues: CNBC Crypto World

September 15, 2025
Blockchain

The figure of the Blockchain lender reaches an assessment of $ 7.6 billion after the Nasdaq debut

September 15, 2025
Blockchain

The blockchain will transform the broken transfer system of football

September 15, 2025
Add A Comment
Leave A Reply Cancel Reply

Single Page Post
Share
  • Facebook
  • Twitter
  • Instagram
  • YouTube
Featured Content
Event

Vienna Blockchain Week 2025: Europe’s Web3 Powerhouse Returns!

September 8, 2025

Vienna, Austria – September 9–11, 2025 – Mark your calendars, because DLT Austria is bringing…

Event

MERGE Madrid 2025: Europa y Latam unidos a través de Web3

September 5, 2025

Este octubre, Madrid se convertirá en el epicentro de la tecnología Web3, blockchain y los…

1 2 3 … 54 Next
  • Facebook
  • Twitter
  • Instagram
  • YouTube

Ripple includes $ 25 million in stable to support companies and American veterans

September 15, 2025

Dogecoin prices gathered at $ 6 in the midst of high cash demand

September 15, 2025

Solana goes beyond Bitcoin and Ethereum, and Wall Street noticed

September 15, 2025
Facebook X (Twitter) Instagram LinkedIn
  • About us
  • Disclaimer
  • Terms of service
  • Privacy policy
  • Contact us
© 2025 Altcoin Observer. all rights reserved by Tech Team.

Type above and press Enter to search. Press Esc to cancel.

bitcoin
Bitcoin (BTC) $ 115,362.91
ethereum
Ethereum (ETH) $ 4,523.51
xrp
XRP (XRP) $ 3.00
tether
Tether (USDT) $ 1.00
bnb
BNB (BNB) $ 919.68
solana
Solana (SOL) $ 234.32
usd-coin
USDC (USDC) $ 1.00
dogecoin
Dogecoin (DOGE) $ 0.268284
staked-ether
Lido Staked Ether (STETH) $ 4,517.42
tron
TRON (TRX) $ 0.344829