- JavaScript developers targeted by hundreds of malicious code libraries Ars Technica
- Supply Chain Attack Uses Smart Contracts for C2 Ops Infosecurity Magazine
- 280+ Typosquat Malicious Packages Attacking npm Developers CybersecurityNews
- NPM supply chain attack uses Ethereum blockchain Developer News