Lucene search
+L

2 matches found

Snyk
Snyk
•added 2026/08/11 3:30 p.m.•12 views

Malicious Package

Overview ethereum-vault-connector is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.4AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/11 12:00 a.m.•53 views

Malicious code in ethereum-vault-connector (npm)

ethereum-vault-connector is a malicious npm package that impersonates Euler's Ethereum Vault Connector EVC protocol. It carries no legitimate functionality; the published tarball contains only a package.json and an install-time payload index.js. Both preinstall and postinstall run node index.js |...

5.5AI score
SaveExploits0References5
Rows per page
Query Builder