Blockchain-powered malware targets JavaScript developers via npm packages

Security researchers have uncovered a new software supply chain campaign using malicious npm packages to infect JavaScript developers with a remote access trojan via a blockchain-based command-and-control infrastructure.