Blockchain Malware: New Threat to Open-Source Security

Malware Hidden in Crypto Code? Two open-source packages, colortoolsv2 and mimelib2, used Ethereum smart contracts to deliver malware through the Node Package Manager, marking a new twist in software supply chain attacks. ReversingLabs discovered a broader network of fake, blockchain-themed repos on GitHub with fabricated activity to deceive developers. With North Korean hackers increasingly targeting crypto projects via poisoned packages, exchanges like Binance are boosting security and sharing threat intel to combat these evolving tactics. Hosted on Acast. See acast.com/privacy for more information.