Malicious code in solana-data (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-5137 Malicious code in solana-data (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-5134 Malicious code in solana-chart (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in solana-chart (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-5135 Malicious code in solana-charts (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in solana-charts (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in solana-web3-adapter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12e75c393c8da1b623873b652c0e4024a25d635513e641c2c50d5899421160ec Any computer that has this package installed or running should be considered...

MAL-2025-5088 Malicious code in solana-web3-adapter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12e75c393c8da1b623873b652c0e4024a25d635513e641c2c50d5899421160ec Any computer that has this package installed or running should be considered...

The vulnerability of the addToQueue() function in the development package for the blockchain platform Solana web3.js, which allows a hacker to gain unauthorized access to protected information.

The vulnerability of the addToQueue function in the development package for the Solana blockchain platform, web3.js, is related to insufficient protection for private keys when accessing crypto wallets. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...

When Blockchain Meets Crawlers: Real-Time Market Analytics in Solana NFT Markets

In this paper, we design and implement a web crawler system based on the Solana blockchain for the automated collection and analysis of market data for popular non-fungible tokens NFTs on the chain. Firstly, the basic information and transaction data of popular NFTs on the Solana chain are...

CVE-2024-54134

A publish-access account was compromised for @solana/web3.js, a JavaScript library that is commonly used by Solana dapps. This allowed an attacker to publish unauthorized and malicious packages that were modified, allowing them to steal private key material and drain funds from dapps, like bots,...

CVE-2022-35917

Solana Pay is a protocol and set of reference implementations that enable developers to incorporate decentralized payments into their apps and services. When a Solana Pay transaction is located using a reference key, it may be checked to represent a transfer of the desired amount to the recipient...

Malicious code in solana-sniper-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab5b4304f1021114e51758ac79fce358d42496edb340cef7df2d5639efa12a74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4025 Malicious code in solana-sniper-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab5b4304f1021114e51758ac79fce358d42496edb340cef7df2d5639efa12a74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solana-trade (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e84e568bb86db442dd7d2e19e6fa1805ea10085d9926220d986941d87ca99259 Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in solana-coin (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fa4c17031f4a667cddae42a648aa66edf30f498296c451a2c0637082772dbcef Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in solana-live (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 edea0605b97d331d0da7af79c24a8875042687bf06aed9192f7cded40da09012 Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-5139 Malicious code in solana-trade (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e84e568bb86db442dd7d2e19e6fa1805ea10085d9926220d986941d87ca99259 Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-5138 Malicious code in solana-live (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 edea0605b97d331d0da7af79c24a8875042687bf06aed9192f7cded40da09012 Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-5136 Malicious code in solana-coin (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fa4c17031f4a667cddae42a648aa66edf30f498296c451a2c0637082772dbcef Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...