EUVD-2025-32656

Malicious code in @pumpswap-sdk4/metadata npm...

Malware in @pumpswap-sdk4/metadata

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...