MAL-2024-10165 Malicious code in solana-transfer (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in solana-transaction (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-10164 Malicious code in solana-transaction (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in solana-token (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7a052cb86f0a3ef5266420bcfed9256955a31ea75bfe4197c42d3a2740621ab4 Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2024-10163 Malicious code in solana-token (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7a052cb86f0a3ef5266420bcfed9256955a31ea75bfe4197c42d3a2740621ab4 Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in py-solana-cli (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-10110 Malicious code in py-solana-cli (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Brave Desktop 1.70.117 Security Fixes

Added simulation support for EVM transactions. - Added simulation support for Solana transactions. Upgraded Chromium to 129.0.6668.59 — refer to Google Chrome advisories for inherited CVEs...

Malicious code in solana-cctp-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f513aced5931ffb63f949f93cc61dfe8ceae696235caee3f926488e16d73de06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8038 Malicious code in solana-cctp-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f513aced5931ffb63f949f93cc61dfe8ceae696235caee3f926488e16d73de06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Rogue PyPI Library Solana Users, Steals Blockchain Wallet Keys

Cybersecurity researchers have discovered a new malicious package on the Python Package Index PyPI repository that masquerades as a library from the Solana blockchain platform but is actually designed to steal victims' secrets. "The legitimate Solana Python API project is known as 'solana-py' on...

Hackers Distributing Malicious Python Packages via Popular Developer Q&A Platform

In yet another sign that threat actors are always looking out for new ways to trick users into downloading malware, it has come to light that the question-and-answer Q&A platform known as Stack Exchange has been abused to direct unsuspecting developers to bogus Python packages capable of draining...

Malicious code in Solana (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4647 Malicious code in Solana (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Brave Desktop 1.67.115 Security Fixes

Fixed Brave Wallet WebHID connection prompt for Solana. Upgraded Chromium to 126.0.6478.56 — refer to Google Chrome advisories for inherited CVEs...

@convexitydmcc/wallet-adapter-walletconnect (>=2.0.0-beta.26 <=2.0.0-rc.5), @renec-foundation/gasless-sdk (>=0.2.3 <=0.2.6) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (=1.48.0)

@solana/web3.js NPM version =1.48.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @convexitydmcc/wallet-adapter-walletconnect =2.0.0-beta.26, =0.2.3, =3.0.0, =6.3.0-profits-mercurial-rc8 Source cves:...

@fabric-foundation/sdk (>=0.0.2 <=0.0.64), @zetamarkets/flex-sdk (=0.1.0) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (=1.18.0)

@solana/web3.js NPM version =1.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @fabric-foundation/sdk =0.0.2, =0.6.15, =0.9.9 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@civic/civic-sign (>=0.0.4 <=0.0.14), @civic/serum (>=0.17.3 <=0.17.4) +11 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.39.0 <=1.39.1)

@solana/web3.js NPM version =1.39.0, =0.0.4, =0.17.3, =0.3.1-3.beta.1, =0.0.1, =0.2.1, =3.4.1, =2.0.0-beta.1, =0.4.3, =3.11.8, =3.11.14 - winto-sdk =1.0.2 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@dynamic-labs/blocto-evm (>=0.19.0 <=2.1.0-alpha.0), @dynamic-labs/ethereum (>=0.17.0 <=2.1.0-alpha.0) +19 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.70.1 <=1.70.3)

@solana/web3.js NPM version =1.70.1, =0.19.0, =0.17.0, =2.0.0, =0.18.100-viem.1, =0.15.1-minimal.0, =2.0.0, =0.17.0, =0.17.0, =0.17.0, =0.19.3, =0.19.0, =0.3.1, =2.1.0, =0.1.18, =0.0.23, =0.0.28 and more Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@glow-app/glow-react (>=0.6.0 <=1.0.1), @glow-app/solana-client (>=0.5.2 <=1.0.4) +17 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.44.0 <=1.44.2)

@solana/web3.js NPM version =1.44.0, =0.6.0, =0.5.2, =1.1.0, =0.1.0, =1.0.5, =4.1.2, =4.1.3, =4.1.3, =0.1.20, =0.2.40, =3.2.0, =0.0.50, =0.1.0, =0.1.2 and more Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...