A number of malicious packages on the npm registry have been discovered by cybersecurity experts to mimic the Hardhat tool from the Nomic Foundation, which is used to steal confidential information from developer workstations.
According to an analysis by the Socket research team, attackers have gained access to these platforms by using malicious npm packages and taking advantage of people’s faith in open source plugins. They have succeeded in stealing important information like private keys, mnemonics, and configuration parameters.
With multiple components for authoring, compiling, debugging, and deploying smart contracts and decentralized apps (dApps), Hardhat is an Ethereum software development environment read more about Cybercriminals Target Ethereum Developers with Fake Hardhat npm Packages.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.