hardhat-core@2.1.2

Analysis

hardhat-core is a combosquat of the hardhat Ethereum framework that ships a pino-style logger codebase with an injected remote-code-execution dropper. index.js spawns lib/caller.js as a detached background node process (stdio ignored, parent unref'd). caller.js POSTs to hxxps://ipcheck-hashed[.]vercel[.]app/api/auth/f1f097d93c318c92f0c5 with the header x-secret-key: _, receives a JavaScript payload in the response, and executes it via the Function constructor with full require access — fetching and running arbitrary remote code at runtime.