MAL-2025-33624 Malicious code in solana-utils-sdk (npm)

The package solana-utils-sdk was found to contain malicious code...

@debridge-finance/solana-contracts-client (>=0.1.0 <=1.0.0), @debridge-finance/solana-utils (=1.0.2) potentially affected by CVE-2024-30253 via @solana/web3.js (=1.62.0)

@solana/web3.js NPM version =1.62.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @debridge-finance/solana-contracts-client =0.1.0, =1.0.0 - @debridge-finance/solana-utils =1.0.2 Source cves: CVE-2024-30253 Sour...