CVE-2024-54134 @solana/web3.js modified package published to npm, containing malware that exfiltrates private key material

A publish-access account was compromised for @solana/web3.js, a JavaScript library that is commonly used by Solana dapps. This allowed an attacker to publish unauthorized and malicious packages that were modified, allowing them to steal private key material and drain funds from dapps, like bots,...

MAL-2024-11182 Malicious code in @0xengine/xmlrpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e8df33e10862a6cfd274bd8eae46b471dd53dbe1c3885b47a379b2f790898f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11149 Malicious code in noirxnodemailer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfb5c01486942b32fea497d1b731b1d73ca00dbbcd6b588f8065e24b128b5805 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11063 Malicious code in parcel-plugin-lighterhtm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 415194ea6ab6f715cf5f3ce8ee4f2b08597339fa35641457a333aed6ff9109a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11036 Malicious code in eslint-plugin-mkt-bff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a8225040f68ab161450053e03e7daf7d2184c9a50e5e727ae3ed5b2bcef2088 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11077 Malicious code in repository-dispatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6945fe41e15be899900e8df18381144d95f14a8645f686d9b4c96f755e46f8d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11109 Malicious code in tbi-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3a7e82acc06456c6fd938b0e951d064648d71031c900bd9efa4e018d3575e3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11010 Malicious code in string-process-mate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2df355e26d748442b2bef75aff72f4bc8a791379093da56fffb1f7b7d9336ecd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10919 Malicious code in clement-malicious-npm-package-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d9e98897d5870d3d52c1ba33f179ba6ef1b3329f46888535d674feda935d87c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in neextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8aa353c92b36b03dd6bee3609d2fc838267b743c206a7e8152ee471fc7589093 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eth-based-p2p-e2e-latency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 596b12335f8cd6e12055b2a8df2f4afb1a74c9275d3f22a0e21bc003956092ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seller-address-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44a834432bdf9ff097e4782377642977bcec11de6a1529a1d20a87a65ac5c44e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10684 Malicious code in styledcomps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0b781ebb0b45a144ec6fcef9fc79b3304f5420286bc6d38b2a73a0c21830194 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10683 Malicious code in sazz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d92dbc3fe418eda55594a9daf2e211b0d4595e4d8eaa8559e9c430e20995eed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-internal-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1777e495156cf7146557c4b12278bbf9af5efe01c047f211bda8e66eb5503f8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10605 Malicious code in @david-lab/sol-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0b5dba42ccf786e68c3da9ea3c922e86a77057afd355a7b4534b190ef156e0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10617 Malicious code in ethers-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b52650e58d88e598b736b50375a5b7be334cd6d8581a470d2c70624a1bbecbf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solana-web3-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcf9d5b7aec80f6f8909d8b65170940ecf00b096f922f111da7848b86257088c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10622 Malicious code in solana-web3-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcf9d5b7aec80f6f8909d8b65170940ecf00b096f922f111da7848b86257088c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10521 Malicious code in puppeteerscroll-down (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef54ed97acfe5ef98e20301d2c06ccf2391055cb225e5c1cc48bc06950e82d6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...