Malicious npm Packages Impersonate Flashbots, Steal Ethereum Wallet Keys
Four npm packages uploaded since Sep 2023 impersonate Flashbots, stealing Ethereum keys and seeds via Telegram
More info