Security News Malicious npm Packages Exploit Ethereum Smart Contracts to Target Crypto Developers TheHackerNews Daniel Bender 03 Sep 2025 Two npm packages hide downloader commands via Ethereum smart contracts; uploaded July 2025; targeting crypto developers.