
Cybersecurity researchers recently uncovered a series of malicious packages within the npm registry designed to compromise developers’ Ethereum wallets and remotely access their machines via SSH backdoor techniques. These suspicious packages, identified as derivatives of the reputable ethers package, specifically aim to harvest Ethereum private keys and facilitate unauthorized SSH access. These packages include ethers-mew, ethers-web3, ethers-6, ethers-eth, ethers-aaa, ethers-audit,