ReversingLabs uncovered a cybercriminal campaign that used Ethereum smart contracts to hide malware instructions and push tainted npm packages.