Sonatype Finds NullReceiver in npm Packages

Sonatype identified six npm packages using Ethereum transactions to fetch malware, a technique called NullReceiver linked to North Korean actors.