Security News Malicious npm Packages Exploit Ethereum Smart Contracts to Target Crypto Developers TheHackerNews Daniel Bender Sep 3, 2025 Two npm packages hide downloader commands via Ethereum smart contracts; uploaded July 2025; targeting crypto developers.