Malicious code in solana-sniper-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab5b4304f1021114e51758ac79fce358d42496edb340cef7df2d5639efa12a74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4025 Malicious code in solana-sniper-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab5b4304f1021114e51758ac79fce358d42496edb340cef7df2d5639efa12a74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solana-trade (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e84e568bb86db442dd7d2e19e6fa1805ea10085d9926220d986941d87ca99259 Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in solana-coin (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fa4c17031f4a667cddae42a648aa66edf30f498296c451a2c0637082772dbcef Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in solana-live (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 edea0605b97d331d0da7af79c24a8875042687bf06aed9192f7cded40da09012 Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-5138 Malicious code in solana-live (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 edea0605b97d331d0da7af79c24a8875042687bf06aed9192f7cded40da09012 Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-5136 Malicious code in solana-coin (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fa4c17031f4a667cddae42a648aa66edf30f498296c451a2c0637082772dbcef Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-5139 Malicious code in solana-trade (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e84e568bb86db442dd7d2e19e6fa1805ea10085d9926220d986941d87ca99259 Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in solana-web3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87dd8c18d15d4abbb750627cb9dfec4be3cd3fa1e2ae9d2ac8113cc0597f43d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3918 Malicious code in solana-web3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87dd8c18d15d4abbb750627cb9dfec4be3cd3fa1e2ae9d2ac8113cc0597f43d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solana-crypto-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb0ae4278aeded272c00f7218890bedf1e2e9dc77d03348eb4a1afe7fa277e83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3917 Malicious code in solana-crypto-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb0ae4278aeded272c00f7218890bedf1e2e9dc77d03348eb4a1afe7fa277e83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious PyPI Package Posing as Solana Tool Stole Source Code in 761 Downloads

Cybersecurity researchers have discovered a malicious package on the Python Package Index PyPI repository that purports to be an application related to the Solana blockchain, but contains malicious functionality to steal source code and developer secrets. The package, named solana-token, is no...

Malicious code in solana-test-suite (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 637014df713a194c727be0c3c8a6883b80fa29c7e66be089dd3bb82e49b915b4 Packages that seem to be created by a legit bug bounty hunter. Designed to look like created by different organisations, they contain a couple of data...

MAL-2025-4240 Malicious code in solana-test-suite (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 637014df713a194c727be0c3c8a6883b80fa29c7e66be089dd3bb82e49b915b4 Packages that seem to be created by a legit bug bounty hunter. Designed to look like created by different organisations, they contain a couple of data...

SolPhishHunter: Towards Detecting and Understanding Phishing on Solana

Solana is a rapidly evolving blockchain platform that has attracted an increasing number of users. However, this growth has also drawn the attention of malicious actors, with some phishers extending their reach into the Solana ecosystem. Unlike platforms such as Ethereum, Solana has distinct...

Malicious code in wormhole-messenger-solana (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3533c227d2e503f88e2ae202b9433a6a7a89000b952c2875242b1834dbd32089 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solana-candles-oracle-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c9505d4ee620ab7696e0bb4f2680eaea2d24795900244ef09291a911f0e7562 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3200 Malicious code in solana-candles-oracle-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c9505d4ee620ab7696e0bb4f2680eaea2d24795900244ef09291a911f0e7562 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

0xppl-solana-portfolio (=1.0.0), 0xuath-sdk-react (>=0.0.2 <=0.0.23) +6453 more potentially affected by CVE-2025-3194 via bigint-buffer (=1.1.5)

bigint-buffer NPM version =1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on bigint-buffer and may be impacted: - 0xppl-solana-portfolio =1.0.0 - 0xuath-sdk-react =0.0.2, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.0, =0.0.77, =0.2.0, =0.1.1,...