MSC-2026-11394

Malicious cryptocurrency wallet-drainer disguised as a JavaScript utility. index.js auto-executes on require/import, reads the host .env for PRIVATEKEY/SECRET/MNEMONIC values, and attempts to transfer funds to hardcoded attacker-controlled wallets across 26 chains via ethers.Wallet.sendTransactio...