Ethereum smart contracts quietly push javascript malware targeting developers

Hackers are using Ethereum smart contracts to conceal malware payloads inside seemingly benign npm packages, a tactic that turns the blockchain into a resilient command channel and complicates takedowns. source: https://cryptoslate.com/ethereum-smart-contracts-quietly-push-javascript-malware-targeting-developers/