Malicious code in solana-utils-sdk (npm)

The package solana-utils-sdk was found to contain malicious code...

MAL-2025-2999 Malicious code in solana-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4fcf79d026074d2ebc0ce48f578a5078acafca383dbd727a0b2e9f5a723f2702 The only thing the package does is send out all the given data about a cryptocurrency transaction, including the private key, to a hardcoded webhook. Feedback...

Malicious code in solana-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4fcf79d026074d2ebc0ce48f578a5078acafca383dbd727a0b2e9f5a723f2702 The only thing the package does is send out all the given data about a cryptocurrency transaction, including the private key, to a hardcoded webhook. Feedback...

@debridge-finance/solana-contracts-client (>=0.1.0, <=1.0.0), @debridge-finance/solana-utils (1.0.2) potentially affected by CVE-2024-30253 via @solana/web3.js (1.62.0)

@solana/web3.js NPM version 1.62.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @debridge-finance/solana-contracts-client =0.1.0, =1.0.0 - @debridge-finance/solana-utils 1.0.2 Source cves: CVE-2024-30253 Source...

@debridge-finance/solana-contracts-client (>=0.1.0, <=1.0.0), @debridge-finance/solana-utils (1.0.2) potentially affected by CVE-2024-30253 via @solana/web3.js (1.62.0)

@solana/web3.js NPM version 1.62.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @debridge-finance/solana-contracts-client =0.1.0, =1.0.0 - @debridge-finance/solana-utils 1.0.2 Source cves: CVE-2024-30253 Source...