287 malicious npm packages impersonated Puppeteer, Bignum.js, and crypto libraries. Notable for using Ethereum smart contracts for command-and-control communication, making traditional takedowns nearly impossible since the C2 infrastructure is decentralized and censorship-resistant.
PACKAGE_NAME_MISMATCH detects naming deviation from legitimate package
| Tool | Verdict | Details |
|---|---|---|
| OSS Risk Guard | Caught | PACKAGE_NAME_MISMATCH detects naming deviation from legitimate package |
| Sonatype (Nexus) | Partial | Weaker ecosystem coverage |
| Socket | Caught | Typosquatting detection across ecosystems |
| Snyk | Missed | No typosquatting detection |
| Black Duck | Missed | No typosquatting detection |
| Endor Labs | Missed | No typosquatting detection |