Malicious Package

Overview verify-contract-ethers is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious Package

Overview generate-schema-ethers is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

MAL-2026-15598 Malicious code in verify-contract-ethers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec7cfabb396e93e034caeb560ea029e3ca2bde784b8c713d5f8941a2b621dd36 The package ships a single bin entry bin/cli.js that, when invoked, runs whoami and POSTs the package name, username, hostname, and platform to a...

Malicious code in verify-contract-ethers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec7cfabb396e93e034caeb560ea029e3ca2bde784b8c713d5f8941a2b621dd36 The package ships a single bin entry bin/cli.js that, when invoked, runs whoami and POSTs the package name, username, hostname, and platform to a...

Malicious code in generate-schema-ethers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 794f10449a8a47c4428b68edcff212be94917e229322394e9dda43e4c5b2b2e0 On require/npx invocation, bin/cli.js runs whoami and POSTs the OS username, hostname, platform, and package name as JSON to the hardcoded URL...

MAL-2026-15594 Malicious code in generate-schema-ethers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 794f10449a8a47c4428b68edcff212be94917e229322394e9dda43e4c5b2b2e0 On require/npx invocation, bin/cli.js runs whoami and POSTs the OS username, hostname, platform, and package name as JSON to the hardcoded URL...

Malicious Package

Overview @ethers-js/contracts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-13343 Malicious code in ethers-signer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153163572a9fdf26e63ad50dd80b9fc3a28b22e89dea3e82acbd23a7ed7b265b The package is a typosquat of @ethersproject/abstract-signer. On require of the main module, index.js reads the full process.env plus hostname,...

Malicious code in ethers-signer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153163572a9fdf26e63ad50dd80b9fc3a28b22e89dea3e82acbd23a7ed7b265b The package is a typosquat of @ethersproject/abstract-signer. On require of the main module, index.js reads the full process.env plus hostname,...

Malicious code in @zzzcrypto/etherjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2aebef684ec4affb6c5d0504179ef4e4f409bf6680cdd6d70772ec8f9b3bf35 @zzzcrypto/etherjs is a typosquat of the popular 'ethers' package. On require, index.js collects the full process.env object along with hostname,...

Malicious code in @wethenorth12/ethers-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6460d1d0c9cc7423bb90aaf0b165fe45b3949fb627b33d817d34c1ffea64d3d8 The package presents itself as a drop-in replacement for the ethers library author metadata ethers-io, repository URL pointing at the legitimate ethe...

MAL-2026-12094 Malicious code in @wethenorth12/ethers-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6460d1d0c9cc7423bb90aaf0b165fe45b3949fb627b33d817d34c1ffea64d3d8 The package presents itself as a drop-in replacement for the ethers library author metadata ethers-io, repository URL pointing at the legitimate ethe...

MAL-2026-12093 Malicious code in @wethenorth12/ethers-signer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb90f0b593abd4ce67cca9ba5adf891758c8d205b023d87986460471a9ab721e On require, index.js collects the host's hostname, username, home directory, platform, current working directory, and the entire process.env,...

Malicious Package

Overview @zzzgenesis00/ethers-wallet is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in @zzzgenesis00/ethers-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a206d278a371fdbb349d679797e7835b5e0ba40d1ac186b3287beb0a23540f09 The package's postinstall.js runs automatically on npm install and harvests installer-owned secrets: it scrapes a curated env-var allowlist NPMTOKEN,...

Malicious code in @zzzgenesis00/etherjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc49c7ec56350694f458d9468efb51a30a9ac20ff490ac44b0cedd8bbbe004a5 The package is published as @zzzgenesis00/etherjs with author 'ricmoo' and a description mimicking the legitimate ethers.js library. On npm install,...

MAL-2026-11298 Malicious code in ethers.json (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf52df7d6ae5e92551680d7529c4cdf686b19b742648e6ff80253deaa0c9919a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethers.json (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf52df7d6ae5e92551680d7529c4cdf686b19b742648e6ff80253deaa0c9919a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview ethers-io-ethers is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in ethers-io-ethers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d93060f754bea6c9c2c5722e253ef9599335702d72a39effe29b2b7668937dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...