NPM package poses as legit Ethereum smart contract, injects Quasar RAT – SC Media

A recent discovery has revealed a deceptive tactic used by a malicious NPM package, which masqueraded as a legitimate Ethereum smart contract but actually injected the Quasar Remote Access Trojan (RAT). This discovery was made by security researchers and serves as a reminder to stay vigilant when downloading and using packages from online repositories. The NPM package in question appeared to be a harmless Ethereum smart contract, but upon closer inspection, it was found to contain the Quasar RAT, a dangerous malware that can compromise the security of a system. Users are advised to exercise caution and thoroughly vet any packages they intend to use in their projects to avoid falling victim to similar malicious attacks.