Security News Russian-Speaking Attackers Target Ethereum Devs with Fake Hardhat npm Packages TheHackerNews Daniel Bender Jan 6, 2025 Malicious npm packages impersonate Hardhat, exfiltrating private keys and mnemonics, with 1,092 downloads reported.