Cybercriminals Target Ethereum Developers with Fake Hardhat npm Packages
A number of malicious packages on the npm registry have been discovered by cybersecurity experts to mimic the Hardhat tool from the Nomic Foundation, which is used to steal confidential information from developer workstations.
According to an analysis by the Socket research team, attackers have gained access to these platforms by using malicious npm packages and taking advantage of people's faith in open source plugins. They have succeeded in stealing important information like private keys, mnemonics, and configuration parameters.
With multiple components for authoring, compiling, debugging, and deploying smart contracts and decentralized apps (dApps), Hardhat is an Ethereum software development environment read more about Cybercriminals Target Ethereum Developers with Fake Hardhat...