Ethereum developers targeted by nefarious npm packages

September 8, 2025

Four nefarious npm packages impersonating Flashbots MEV infrastructure and cryptographic tools, which have been downloaded nearly 700 times in total, have been leveraged by threat actors to compromise Ethereum developers’ cryptocurrency wallet credentials, reports The Hacker News.