Fake Ethereum Security Tool Caught Secretly Installing Quasar RAT Malware on NPM

A malicious npm package masquerading as an Ethereum smart contract vulnerability detector was discovered deploying Quasar RAT malware. The package uses sophisticated obfuscation and sandbox detection techniques. Additionally, a related study revealed widespread GitHub star manipulation, wi...