Trojanized npm Packages Decode C2 IP From Ethereum Recipient Addresses
- Posted on August 5, 2026
- By The Hacker News
- 0 Views
- 1 min read
In brief
Generating AI summary…
Trojanized npm Packages Decode C2 IP From Ethereum Recipient Addresses
NullReceiver lets two North Korea-linked npm packages decode a C2 IP from blank Ethereum transfers without smart contracts or transaction calldata.
