Malicious code in web3js-wallet (npm)

🗓️ 15 Jul 2025 05:50:34Reported by OSSF Malicious PackagesType

ossf

ossf🔗 github.com👁 3 Views

This package fully compromises any computer it runs on; rotate secrets from another computer and remove it.

Vulners

Node

npm web3js-walletMatch1.0.0

OR

npm web3js-walletMatch1.0.1

OR

npm web3js-walletMatch1.0.2

OR

npm web3js-walletMatch1.0.3

OR

npm web3js-walletMatch1.0.4

OR

npm web3js-walletMatch1.0.6

OR

npm web3js-walletMatch1.0.7

OR

npm web3js-walletMatch1.0.8

OR

npm web3js-walletMatch1.0.9

OR

npm web3js-walletMatch1.0.10

OR

npm web3js-walletMatch1.0.11

OR

npm web3js-walletMatch1.0.12

OR

npm web3js-walletMatch1.0.13

OR

npm web3js-walletMatch1.0.14

OR

npm web3js-walletMatch1.0.15

OR

npm web3js-walletMatch1.0.16

OR

npm web3js-walletMatch1.0.17

OR

npm web3js-walletMatch1.0.18

OR

npm web3js-walletMatch1.0.19

OR

npm web3js-walletMatch1.0.20

OR

npm web3js-walletMatch1.0.21

OR

npm web3js-walletMatch1.0.22

OR

npm web3js-walletMatch1.0.23

OR

npm web3js-walletMatch1.0.24

OR

npm web3js-walletMatch1.0.25

OR

npm web3js-walletMatch1.0.26

OR

npm web3js-walletMatch1.0.27

OR

npm web3js-walletMatch1.0.28

OR

npm web3js-walletMatch1.0.29

OR

npm web3js-walletMatch1.0.30

OR

npm web3js-walletMatch1.0.31

OR

npm web3js-walletMatch1.0.32

OR

npm web3js-walletMatch1.0.33

OR

npm web3js-walletMatch1.0.34

OR

npm web3js-walletMatch1.0.35

OR

npm web3js-walletMatch1.0.36

OR

npm web3js-walletMatch1.0.37

OR

npm web3js-walletMatch1.0.38

OR

npm web3js-walletMatch1.0.39

OR

npm web3js-walletMatch1.0.40

OR

npm web3js-walletMatch1.0.41

OR

npm web3js-walletMatch1.0.42

OR

npm web3js-walletMatch1.0.43

OR

npm web3js-walletMatch1.0.44

OR

npm web3js-walletMatch1.0.45

OR

npm web3js-walletMatch1.0.46

OR

npm web3js-walletMatch1.0.47

OR

npm web3js-walletMatch1.0.53

OR

npm web3js-walletMatch1.0.56

OR

npm web3js-walletMatch1.0.57

OR

npm web3js-walletMatch1.0.58

OR

npm web3js-walletMatch2.0.1

OR

npm web3js-walletMatch2.0.2

OR

npm web3js-walletMatch2.0.3

OR

npm web3js-walletMatch2.0.4

OR

npm web3js-walletMatch2.0.5

OR

npm web3js-walletMatch2.0.6

OR

npm web3js-walletMatch2.0.7

OR

npm web3js-walletMatch2.0.8

OR

npm web3js-walletMatch2.0.9

OR

npm web3js-walletMatch2.0.10

OR

npm web3js-walletMatch2.0.11

OR

npm web3js-walletMatch2.0.12

OR

npm web3js-walletMatch2.0.13

OR

npm web3js-walletMatch2.0.14

OR

npm web3js-walletMatch2.0.15

OR

npm web3js-walletMatch2.0.16

OR

npm web3js-walletMatch2.0.17

OR

npm web3js-walletMatch2.0.18

OR

npm web3js-walletMatch2.0.19

OR

npm web3js-walletMatch2.0.20

OR

npm web3js-walletMatch2.0.21

OR

npm web3js-walletMatch2.0.22

OR

npm web3js-walletMatch2.0.23

OR

npm web3js-walletMatch2.0.24

OR

npm web3js-walletMatch2.0.25

OR

npm web3js-walletMatch2.0.26

OR

npm web3js-walletMatch2.0.27

OR

npm web3js-walletMatch2.0.28

OR

npm web3js-walletMatch2.0.29

OR

npm web3js-walletMatch2.0.30

OR

npm web3js-walletMatch2.0.31

OR

npm web3js-walletMatch2.0.32

OR

npm web3js-walletMatch2.0.33

OR

npm web3js-walletMatch2.0.34

OR

npm web3js-walletMatch2.0.35

OR

npm web3js-walletMatch2.0.36

OR

npm web3js-walletMatch2.0.37

OR

npm web3js-walletMatch2.0.38

OR

npm web3js-walletMatch2.0.39

OR

npm web3js-walletMatch2.0.40

OR

npm web3js-walletMatch2.0.41

Source	Link
github	www.github.com/advisories/GHSA-chjw-8fjv-vmw3
security	www.security.snyk.io/vuln/SNYK-JS-WEB3JSWALLET-10752251
npmjs	www.npmjs.com/package/web3js-wallet

01 Aug 2025 10:42Current

6.9Medium risk

Vulners AI Score6.9

web3js wallet malicious code node package full compromise rotate secrets remove package malware persistence