Trojanized npm Packages Hide C2 IPs in Ethereum
August 05, 2026
1 min read
5 views
cybersecurity
threats
news
Researchers discovered trojanized npm packages 'bianira-ui' and 'fluid-type-ui' using a new EtherHiding variant, NullReceiver, to hide C2 IPs in Ethereum transfer addresses.
Was this article helpful?
0 found this helpful