OTX Threat: Equation of Compromise: Anatomy of a Live npm Supply-Chain Campaign

A sophisticated six-month campaign targeting quantitative and DeFi developers through malicious npm packages disguised as legitimate mathematics libraries. The operation employs encrypted loaders that trigger only when specific cryptographic operations are performed, specifically when solving linear equations with predetermined matrices. Command and control infrastructure uses Ethereum Sepolia tes Sectors: Finance, Technology