
In a groundbreaking revelation, researchers at Checkmarx recently discovered a novel open-source supply chain attack that integrates blockchain technology with traditional malware, posing a significant threat to JavaScript development environments. The malicious package identified, “jest-fet-mock,” which was found on npm, cleverly mimics legitimate JavaScript testing utilities “fetch-mock-jest” and “Jest-Fetch-Mock” through a classic typosquatting technique. Such an approach aims to deceive