Security News Russian-Speaking Attackers Target Ethereum Devs with Fake Hardhat npm Packages TheHackerNews Daniel Bender 06 Jan 2025 Share Malicious npm packages impersonate Hardhat, exfiltrating private keys and mnemonics, with 1,092 downloads reported.