NullReceiver: Ethereum Dead-Drop Malware in npm Packages

Six npm packages use the NullReceiver technique, fetching next-stage payloads via Ethereum transactions linked to North Korean threat actors, evolving from EtherHiding.