Malicious Package

Overview solidity-hold is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in solidity-hold (npm)

Source: amazon-inspector 39144e822a0964821b92859c04cbe7311ac13a889c585465ac0533c831f1904f The npm package [email protected] impersonates the popular pino logger: the README badges and lib/ source tree are copied from pino pinojs/pino, but lib/config.js is replaced with a 4 MB...

MAL-2026-14220 Malicious code in solidity-hold (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39144e822a0964821b92859c04cbe7311ac13a889c585465ac0533c831f1904f The npm package [email protected] impersonates the popular pino logger: the README badges and lib/ source tree are copied from pino pinojs/pino, bu...

Malicious code in solidity-hold (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39144e822a0964821b92859c04cbe7311ac13a889c585465ac0533c831f1904f The npm package [email protected] impersonates the popular pino logger: the README badges and lib/ source tree are copied from pino pinojs/pino, bu...