hardhat-compile-ethers@0.0.1

Analysis

hardhat-compile-ethers is a trojanized clone impersonating the legitimate Hardhat plugin ecosystem for Ethereum development. When imported via require() in a hardhat.config file, the compiled entry point dist/src/index.js executes injected code that silently installs the zyncmap package from npm (npm install zyncmap --no-save --silent --no-audit --no-fund) via a spawned child process, then requires and executes the installed zyncmap module as a second-stage payload. The TypeScript source files are clean — the malicious code was injected only into the compiled JavaScript output, which is the code that runs at runtime.