Malicious code in @nomicsfoundation/web3-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8be3c236328576fc8bb353a6101fbbf35e483b67f019623f8d2f7538898b568 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nomicsfoundation/sdk-test1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd1a561b2ed5703af862c67f4c412afa3ba942efe78ee0b7fc55066fc7c8c316 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nomicsfoundation/hardhat-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47ee3c366ab380260bf1b14296eaac2bfe3c76b726ea2c18b271e9e2af4b8f7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nomicsfoundation/sdk-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dd2aa93af5e60cc32d01700108f493d86a9f886cc6a62fb60b06ce088a605e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-623 Malicious code in @nomicsfondation/hardhat-configs (npm)

This package exfiltrates sensitive Ethereum-related data such as mnemonics and private keys to an attacker-controlled server. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72a47b5bdfeac96982433856ac791ab0638f2d6f64f388ceb2a284f35597c37a Any computer that has this...