最新报道:Cybersecurity researchers have uncovered a novel malware distribution method using Ethereum smart contracts to hide malicious URLs in npm packages like colortoolsv2 and mimelib2. These seemingly benign packages fetch attack payloads from on-chain sources upon installation, bypassing traditional security scans. The technique leverages blockchain’s immutability to create persistent, hard-to-detect threats, highlighting evolving risks in open-source software supply chains.