MAL-2026-13351 Malicious code in spl-token-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f95b625c92e85b1c0d5c10a192c70f8f82cf8d3b2ac7b66c034635b680785654 On require, index.js serializes the full process.env together with hostname, username, homedir, platform, cwd, and package metadata, base64-encodes t...

Malicious code in @zzzgenesis00/solana-spl-token (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 985d4d8e5069084334daa08512249314d36d9fa8662adef050021c2400dacbdd @zzzgenesis00/[email protected] impersonates the Solana SPL Token package and runs postinstall.js on npm install. The script harvests host...

MAL-2026-12123 Malicious code in @zzzgenesis00/solana-spl-token (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 985d4d8e5069084334daa08512249314d36d9fa8662adef050021c2400dacbdd @zzzgenesis00/[email protected] impersonates the Solana SPL Token package and runs postinstall.js on npm install. The script harvests host...

MAL-2026-12100 Malicious code in @wethenorth12/solana-spl-token (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dde46db2fbc17fae2957070f85bc43fdb1d265444f2e5adc936faa6f82e96e2 @wethenorth12/solana-spl-token is a typosquat of the legitimate @solana/spl-token package. On module load, index.js collects hostname, username, home...

Malicious code in solana-token (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7a052cb86f0a3ef5266420bcfed9256955a31ea75bfe4197c42d3a2740621ab4 Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2024-10163 Malicious code in solana-token (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7a052cb86f0a3ef5266420bcfed9256955a31ea75bfe4197c42d3a2740621ab4 Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...