Malware Campaign Uses Ethereum Smart Contracts to Control NPM Typosquat Packages

The malware-containing packages run obfuscated JavaScript during installation, retrieving a binary from a remote server that establishes persistence and exfiltrates sensitive data.