Security researchers found malware packages using the Ethereum blockchain to conceal malicious commands on GitHub repos.

Now Krause is back with a new tool that lets anyone see JavaScript commands injected through an in-app browser.

Hackers are exploiting Ethereum smart contracts to inject malware into popular NPM coding libraries, using packages to run ...