Malicious code in @metaplex-foundations/umi-public-keys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48abfc0f902cd0f09b0c2ae7449eaefbf3b4baf1cb12e4165f509b86f7ad8692 The package @metaplex-foundations/umi-public-keys was found to contain malicious code. Source: ghsa-malware...

MAL-2025-5012 Malicious code in metaplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56094c5aa47c7f90dabdf4a647d1fb79534f42102ce0ea011b8fb4bc0aa398a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in metaplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56094c5aa47c7f90dabdf4a647d1fb79534f42102ce0ea011b8fb4bc0aa398a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@alphabatem/metaplex-shadow-drive (>=2.0.4, <=2.0.5), @builderdao/apis (>=0.0.4, <=0.0.8) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.33.0)

@solana/web3.js NPM version 1.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @alphabatem/metaplex-shadow-drive =2.0.4, =0.0.4, =0.0.2, =0.0.3 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J...