Snyk
Snyk Vulnerability Database: Malicious Package in eth-api-node (npm) · published 4 Aug 2023
Malicious Package in eth-api-node ... This package is part of an Open Source Supply Chain Attack campaign conducted by the Lazarus Group. The threat actors initiated the attack chain by impersonating developers and recruiters to target employees of technology firms, focused on individuals associated with the blockchain, cryptocurrency, and online gambling sectors.