Ethereum smart contracts quietly push javascript malware targeting developers

Hackers are exploiting Ethereum smart contracts to hide malware in npm packages, making it harder to detect and remove. This method allows them to use the blockchain as a command channel.