8 matches found
Malicious code in hex-encode-utils (npm)
hex-encode-utils is a purpose-built npm trojan that masquerades as a zero-dependency hex encoding/decoding utility published by the npm account devroolx under the repo github.com/stdlib-utils/hex-encode-utils. It is a multi-stage downloader/loader that runs automatically on install via a...
MAL-2026-13214 Malicious code in @zzzcrypto/solana-spl-token (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ceac45508e2f9506a082b2195d3bae4b046f096d11856d72ea53f784ad5992e @zzzcrypto/[email protected] is a typosquat/impersonation of @solana/spl-token README self-describes as a 'drop-in replacement'; author metadata...
MAL-2026-12105 Malicious code in @wethenorth12/tronweb3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f34dbfde05ea1b80131dc35978c18b429f4ef11da06334e93c109db08c31f19 The package presents itself as a drop-in replacement for the legitimate tronweb SDK author field 'tronprotocol', README advertising tronweb...
MAL-2026-12101 Malicious code in @wethenorth12/solana-wallet-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14e7d05f22a60d86ce4aea030108a6f50a69b85ce9bb0219eb59fbe2dbc3bbb2 On require, index.js JSON-encodes the full process.env plus hostname, username, homedir, platform, cwd, and package metadata, base64-encodes the...
MAL-2026-11042 Malicious code in faust-cont (npm)
The npm package faust-cont is a supply-chain dropper disguised as a benign CLI tool index.js is a decoy that only logs "cli tool install package loaded". The real behaviour is placed in an install script. An install lifecycle hook install: node install.js executes automatically on npm install,...
Malicious code in faust-cont (npm)
The npm package faust-cont is a supply-chain dropper disguised as a benign CLI tool index.js is a decoy that only logs "cli tool install package loaded". The real behaviour is placed in an install script. An install lifecycle hook install: node install.js executes automatically on npm install,...
