MAL-2026-16089 Malicious code in raydium-clmm-sdk (npm)

raydium-clmm-sdk 0.0.1 and 0.0.2 identical dist/index.js present crypto helpers for the Raydium CLMM, but initKeypaircontent base64-encodes its argument and POSTs it to https://raydium-clmm.maingoal.xyz/v1/check through checkvalidator, and randomBytessize forwards the hex output of...

Malicious code in raydium-clmm-sdk (npm)

raydium-clmm-sdk 0.0.1 and 0.0.2 identical dist/index.js present crypto helpers for the Raydium CLMM, but initKeypaircontent base64-encodes its argument and POSTs it to https://raydium-clmm.maingoal.xyz/v1/check through checkvalidator, and randomBytessize forwards the hex output of...