Lucene search
+L

4 matches found

Snyk
Snyk
•added 2026/09/04 6:31 a.m.•14 views

Malicious Package

Overview @quantixfinance/wallet is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

9.8CVSS5.8AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/09/03 6:31 p.m.•6 views

Malicious code in @quantixfinance/wallet (npm)

Source: amazon-inspector 18cabdbe5d59eb5064ea44a0a73db01d23affa7975049251454f599210aa79e3 The package advertises itself as a wallet library but ships a 67-byte no-op index.js; the entire payload is a preinstall lifecycle script that fires automatically on npm install. The script iterates...

6AI score
SaveExploits0References3Affected Software1
osv_mal
osv_mal
•added 2026/09/03 3:51 p.m.•14 views

MAL-2026-15857 Malicious code in @quantixfinance/wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18cabdbe5d59eb5064ea44a0a73db01d23affa7975049251454f599210aa79e3 The package advertises itself as a wallet library but ships a 67-byte no-op index.js; the entire payload is a preinstall lifecycle script that fires...

5.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/03 3:51 p.m.•40 views

Malicious code in @quantixfinance/wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18cabdbe5d59eb5064ea44a0a73db01d23affa7975049251454f599210aa79e3 The package advertises itself as a wallet library but ships a 67-byte no-op index.js; the entire payload is a preinstall lifecycle script that fires...

5.9AI score
SaveExploits0References1
Rows per page
Query Builder