Malicious code in @ethers-js/contracts (npm)

Source: amazon-inspector 06aee7d1e943a9d9a705acf4f28286eb5460ab9a56057a0811274787478f7c68 Package impersonates the ethers project real releases publish under ethers and @ethersproject/, not @ethers-js. The postinstall lifecycle script in scripts/postinstall.js is obfuscated with \x-hex-encoded...

Malicious Package

Overview @ethers-js/contracts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...