Hackers are increasingly using a new AI-powered offensive security framework called HexStrike-AI in real attacks to exploit ...

Two npm packages hide downloader commands via Ethereum smart contracts; uploaded July 2025; targeting crypto developers.

Security researchers found malware packages using the Ethereum blockchain to conceal malicious commands on GitHub repos.

In contrast, colortoolsv2 and mimelib2 leveraged Ethereum smart contracts to store and deliver the URLs used for fetching the ...