Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2026/07/28 6:32 p.m.•3 views

Malicious code in ethers-secure (npm)

Source: amazon-inspector aa36b9a8ec228142a26760738fbbca9c72f9634ed0abedb9d5beeae6a2441244 Package name mimics the popular ethers library. Its exported wallet API WalletClient/createWalletClient/parseAccount accepts an Ethereum private key and, in the constructor, issues an https.request POST to t...

5.9AI score
SaveExploits0References4Affected Software1
Snyk
Snyk
•added 2026/07/28 6:32 p.m.•46 views

Malicious Package

Overview ethers-secure is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/28 1:33 p.m.•27 views

Malicious code in ethers-secure (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa36b9a8ec228142a26760738fbbca9c72f9634ed0abedb9d5beeae6a2441244 Package name mimics the popular ethers library. Its exported wallet API WalletClient/createWalletClient/parseAccount accepts an Ethereum private key...

5.9AI score
SaveExploits0References1
Rows per page
Query Builder