CVE-2024-54134 @solana/web3.js modified package published to npm, containing malware that exfiltrates private key material

A publish-access account was compromised for @solana/web3.js, a JavaScript library that is commonly used by Solana dapps. This allowed an attacker to publish unauthorized and malicious packages that were modified, allowing them to steal private key material and drain funds from dapps, like bots,...

CVE-2024-54134 @solana/web3.js modified package published to npm, containing malware that exfiltrates private key material

A publish-access account was compromised for @solana/web3.js, a JavaScript library that is commonly used by Solana dapps. This allowed an attacker to publish unauthorized and malicious packages that were modified, allowing them to steal private key material and drain funds from dapps, like bots,...

Researchers Uncover Backdoor in Solana's Popular Web3.js npm Library

Cybersecurity researchers are alerting to a software supply chain attack targeting the popular @solana/web3.js npm library that involved pushing two malicious versions capable of harvesting users' private keys with an aim to drain their cryptocurrency wallets. The attack has been detected in...

solana/web3.js 信息泄露漏洞

solana/web3.js is a JavaScript library from Solana Labs. An information disclosure vulnerability exists in solana/web3.js versions 1.95.6 and 1.95.7, which stems from a vulnerability that allows an attacker to distribute unauthorized malicious packages that have been modified to steal private key...

Malicious code in @solana/web3.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 507e136eb7d13bd9c88a5e20d692768a759c2ae382d1ab54ba66c196b560cacb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11183 Malicious code in @solana/web3.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 507e136eb7d13bd9c88a5e20d692768a759c2ae382d1ab54ba66c196b560cacb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-9247 · Solana · @Solana/Web3.Js

Name of the Vulnerable Software and Affected Versions: @solana/web3.js versions 1.95.6 through 1.95.7 Description: A publish-access account was compromised for @solana/web3.js, a JavaScript library commonly used by Solana dapps. This allowed an attacker to publish unauthorized and malicious...

Malicious code in solana-web3-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcf9d5b7aec80f6f8909d8b65170940ecf00b096f922f111da7848b86257088c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10622 Malicious code in solana-web3-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcf9d5b7aec80f6f8909d8b65170940ecf00b096f922f111da7848b86257088c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Researchers Uncover Python Package Targeting Crypto Wallets with Malicious Code

Cybersecurity researchers have discovered a new malicious Python package that masquerades as a cryptocurrency trading tool but harbors functionality designed to steal sensitive data and drain assets from victims' crypto wallets. The package, named "CryptoAITools," is said to have been distributed...

MAL-2024-10165 Malicious code in solana-transfer (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in solana-transfer (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in solana-transaction (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-10164 Malicious code in solana-transaction (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in solana-token (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7a052cb86f0a3ef5266420bcfed9256955a31ea75bfe4197c42d3a2740621ab4 Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2024-10163 Malicious code in solana-token (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7a052cb86f0a3ef5266420bcfed9256955a31ea75bfe4197c42d3a2740621ab4 Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in py-solana-cli (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-10110 Malicious code in py-solana-cli (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Brave Desktop 1.70.117 Security Fixes

Added simulation support for EVM transactions. - Added simulation support for Solana transactions. Upgraded Chromium to 129.0.6668.59 — refer to Google Chrome advisories for inherited CVEs...

Malicious code in solana-cctp-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f513aced5931ffb63f949f93cc61dfe8ceae696235caee3f926488e16d73de06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...