408 matches found
MAL-2025-192374 Malicious code in solana-dexco-basic (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c85fd31c83f8c435f8ac1833cf404a39af10af647c6305eab6e8ff993eadf9a The package solana-dexco-basic was found to contain malicious code. Source: ghsa-malware...
GlassWorm Returns with 24 Malicious Extensions Impersonating Popular Developer Tools
The supply chain campaign known as GlassWorm has once again reared its head, infiltrating both Microsoft Visual Studio Marketplace and Open VSX with 24 extensions impersonating popular developer tools and frameworks like Flutter, React, Tailwind, Vim, and Vue. GlassWorm was first documented in...
Malicious code in solana-dexfi-suite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4f861ff5e19b1087835b4a7ad5765c382e2f243dbf1521bd3154c0a93e79051 The package solana-dexfi-suite was found to contain malicious code. Source: ghsa-malware...
Malicious Package
Overview solana-dexfi-suite is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2025-200197
Malicious code in solana-dexfi-suite npm...
MAL-2025-191551 Malicious code in solana-dexfi-suite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4f861ff5e19b1087835b4a7ad5765c382e2f243dbf1521bd3154c0a93e79051 The package solana-dexfi-suite was found to contain malicious code. Source: ghsa-malware...
Malicious code in solana-dev-mcp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c145bf7c5a5338ce094da7306d81c107eb218975e136423df4b1e3f71207b755 The package solana-dev-mcp was found to contain malicious code...
EUVD-2025-200042
Malicious code in solana-dev-mcp npm...
MAL-2025-191527 Malicious code in solana-dev-mcp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c145bf7c5a5338ce094da7306d81c107eb218975e136423df4b1e3f71207b755 The package solana-dev-mcp was found to contain malicious code...
Chrome Extension Caught Injecting Hidden Solana Transfer Fees Into Raydium Swaps
Cybersecurity researchers have discovered a new malicious extension on the Chrome Web Store that's capable of injecting a stealthy Solana transfer into a swap transaction and transferring the funds to an attacker-controlled cryptocurrency wallet. The extension, named Crypto Copilot, was first...
Prompt Engineering Vs. Fine-Tuning for LLM-Based Vulnerability Detection in Solana and Algorand Smart Contracts
Smart contracts have emerged as key components within decentralized environments, enabling the automation of transactions through self-executing programs. While these innovations offer significant advantages, they also present potential drawbacks if the smart contract code is not carefully design...
Self-Spreading 'GlassWorm' Infects VS Code Extensions in Widespread Supply Chain Attack
Cybersecurity researchers have discovered a self-propagating worm that spreads via Visual Studio Code VS Code extensions on the Open VSX Registry and the Microsoft Extension Marketplace, underscoring how developers have become a prime target for attacks. The sophisticated threat, codenamed...
EUVD-2022-3433
Malicious code in bioql PyPI...
EUVD-2024-3483
Malicious code in bioql PyPI...
EUVD-2022-0750
Malicious code in bioql PyPI...
EUVD-2024-1160
Malicious code in bioql PyPI...
EUVD-2022-6575
Malicious code in bioql PyPI...
Malicious Rust Crates Steal Solana and Ethereum Keys — 8,424 Downloads Confirmed
Cybersecurity researchers have discovered two malicious Rust crates impersonating a legitimate library called fastlog to steal Solana and Ethereum wallet keys from source code. The crates, named fasterlog and asyncprintln, were published by the threat actor under the alias rustguruman and...