- JavaScript developers targeted by hundreds of malicious codification libraries Ars Technica
- Supply Chain Attack Uses Smart Contracts for C2 Ops Infosecurity Magazine
- 280+ Typosquat Malicious Packages Attacking npm Developers CybersecurityNews
- NPM proviso concatenation onslaught uses Ethereum blockchain Developer News