Ethereum smart contracts are being used to download malware via poisoned NPM packages, something Binance has linked to DPRK ...

Hackers hijacked NPM libraries in a massive supply chain attack, injecting malware that swaps crypto wallet addresses to steal funds.