Security News Trojanized npm Packages Decode C2 IP From Ethereum Recipient Addresses TheHackerNews Daniel Bender 05 Aug 2026 Share NullReceiver lets two North Korea-linked npm packages decode a C2 IP from blank Ethereum transfers without smart contracts or transaction calldata.