Malicious code in hardhat-contract-deploy (npm)

The package hardhat-contract-deploy was found to contain malicious code...

MAL-2025-22212 Malicious code in hardhat-contract-deploy (npm)

The package hardhat-contract-deploy was found to contain malicious code...

Malware in hardhat-contract-deploy

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...