Ethereum smart contracts used to push malicious code on npm

https://www.securitricks.com/reports/ethereum-smart-contracts-used-to-push-malicious-code-on-npm/