MSC-2026-6129

Malicious npm/PyPI packages impersonating Solana web3.js and CMS tooling; install-time credential + crypto-wallet stealer Solana keypairs, .env, SSH, cloud/SCM tokens with Telegram-C2 backdoor, fund-draining and RPC-tampering. Entire package malicious...