Report: Hackers Use Ethereum Smart Contracts to Hide Malicious Code
Jinse Finance reported that according to the latest report from security company ReversingLabs, hackers are adopting innovative methods by using Ethereum smart contracts to hide malicious instructions in npm packages. Two malicious packages named "colortoolsv2" and "mimelib2" appeared in July this year, and instead of hardcoding links directly in the code, they obtain the next stage of attack instructions by querying Ethereum contracts, which greatly increases the difficulty of detection and removal. The attackers also created fake cryptocurrency-themed GitHub repositories, boosting credibility by forging stars and auto-generated commit records to lure developers into adding these dependencies.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
EIA expects US oil demand to remain flat in 2026 and 2027
The U.S. Energy Information Administration (EIA) expects U.S. oil demand in 2026 to be 20.6 million barrels per day, unchanged from previous forecasts; demand for 2027 is projected at 20.8 million barrels per day, also the same as the earlier projection.
EIA raises forecast for U.S. oil production in 2026 and 2027
U.S. Energy Information Administration (EIA): U.S. oil production is expected to reach 13.87 million barrels per day in 2026, up from the previous forecast of 13.83 million barrels per day; production for 2027 is projected at 14.30 million barrels per day (previously 14.26 million barrels per day).
Brent crude oil futures main contract surpasses $100 per barrel
The main contract of Brent crude oil futures has just surpassed the $100.00 per barrel mark, now quoted at $100.04 per barrel, down 0.26% on the day.
Crypto prices
More
