1 matches found
MAL-2024-9425 Malicious code in ethers-web3 (npm)
The package contains additional code to append a hardcoded SSH key to the user's authorizedkeys file, creating a backoor, along with exfiltrating user private keys to an attack-controlled server...