Malicious npm Packages Target Developers' Ethereum Wallets with SSH Backdoor

In the current attack campaign, the malicious code is embedded directly into the packages, allowing threat actors to siphon private keys to the domain "ether-sign[.]com."