MSC-2025-7874

slice-ansi was compromised to include malicious code that targets browser-based web3 environments. The injected payload intercepts Ethereum and Solana wallet interactions, redirecting funds and approvals to attacker-controlled addresses. The compromise occurred after a maintainer’s account was...

Malicious code in slice-ansi (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31f9a8b6cc1f6d9a5da5a97a47505878b0b5c25460cbaeb09cf2032e29b6b82a Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-46979 Malicious code in slice-ansi (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31f9a8b6cc1f6d9a5da5a97a47505878b0b5c25460cbaeb09cf2032e29b6b82a Any computer that has this package installed or running should be considered fully compromised. All...

Malware in slice-ansi

Any computer that has this package installed or running should be considered affected by a browser-based interceptor that hijacks network traffic and application APIs. The interceptor injects itself into functions related to web traffic and cryptocurrency wallets. The interceptor replaces values...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package version contains malicious code that monitors network traffic when run in a browser and targets crypto transactions. The injected malicious code activates a hook whenever a Web3 wallet is present...