最新报道:According to researchers at ReversingLabs, the NPM packages "colortoolsv 2" and "mimelib 2," released in July, exploited Ethereum smart contracts to hide malicious URLs and avoid security scans. These packages act as downloaders, obtaining command and control server addresses from smart contracts and then downloading second-stage malware, making blockchain traffic appear legitimate and difficult to detect. The research indicates this is the first time Ethereum smart contracts have been used to host malicious command URLs, demonstrating the rapid evolution of attackers' strategies for evading detection in open source repositories.