Blackpoint uncovers ChainScript, a Node.js RAT that queries a Polygon smart contract to find and rotate its command server.
A malicious npm package reached over 2 million weekly downloads by hiding its payload in a routine library function rather than an install script.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results