Cybersecurity researchers have discovered two malicious packages on the npm registry that are designed to infect another locally installed package, underscoring the continued evolution of software supply chain attacks targeting the open-source ecosystem.
The packages in question are ethers-provider2 and ethers-providerz, with the former downloaded 73 times to date since it was published on



Source: TheHackerNews
Source Link: https://thehackernews.com/2025/03/malicious-npm-package-modifies-local.html