Malicious npm packages use devious backdoors to target users

A digital representation of blockchain.

---

• Security researchers from Reversing Labs find two malicious packages on npm
• These serve as downloaders and target software developers building on the Ethereum blockchain
• The malware opens a reverse shell and grants attackers access to target computers