Attackers have taken over 10 npm packages and slipped hidden code into 12 releases. The code uses the Ethereum blockchain to find a server and download more malware.
Corporate reluctance to share data could hinder proactive AI agent adoption.