4 matches found
MAL-2024-9423 Malicious code in ethers-eth (npm)
The package contains additional code to exfiltrate user private keys to an attack-controlled server...
MAL-2024-9425 Malicious code in ethers-web3 (npm)
The package contains additional code to append a hardcoded SSH key to the user's authorizedkeys file, creating a backoor, along with exfiltrating user private keys to an attack-controlled server...
MAL-2024-9422 Malicious code in ethers-aaa (npm)
The package contains additional code to exfiltrate user private keys to an attack-controlled server. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 268e60b27602a9e78702588325e96f875b3d37da5815147256c8becfd3d97270 Any computer that has this package installed or...