Malicious Package

Overview gmgn-trading-kit is a malicious package. This package contains malicious code. Although this package may be attempting to impersonate a legitimate organization, it has no connection to that organization or its authors. Remediation Avoid using all malicious instances of the gmgn-trading-k...

Malicious code in gmgn-trading-kit (npm)

Source: amazon-inspector 9fd3a47d22b8a9b20523cc6fa00f3b8a73e51e057dbfc4fe0034a785219563c3 postinstall.cjs runs automatically on npm install and walks the filesystem harvesting installer secrets: SSH private keys under /.ssh, /.netrc, /.git-credentials, Solana keypairs, wallet.json/key. files unde...

Malicious code in gmgn-trading-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd3a47d22b8a9b20523cc6fa00f3b8a73e51e057dbfc4fe0034a785219563c3 postinstall.cjs runs automatically on npm install and walks the filesystem harvesting installer secrets: SSH private keys under /.ssh, /.netrc,...

MAL-2026-16094 Malicious code in gmgn-trading-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd3a47d22b8a9b20523cc6fa00f3b8a73e51e057dbfc4fe0034a785219563c3 postinstall.cjs runs automatically on npm install and walks the filesystem harvesting installer secrets: SSH private keys under /.ssh, /.netrc,...