MAL-2026-433 Malicious code in wallet-adapter-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd2a29de3dd67bd591f660c8b964bc262ba1967f0338d11a9e015ee04448c87 The package wallet-adapter-react was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview wallet-adapter-react is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2026-3729

Malicious code in wallet-adapter-react npm...

Malicious code in wallet-adapter-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd2a29de3dd67bd591f660c8b964bc262ba1967f0338d11a9e015ee04448c87 The package wallet-adapter-react was found to contain malicious code. Source: ghsa-malware...

MAL-2025-1177 Malicious code in sol-wallet-adapter-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b73b8c9916aaa68a346fd8bc05ae98f04028ce384654c5ece31bbf68657a7be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-718 Malicious code in wallet-adapter-demo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41c88a5f680ce3b7a91cc33acc9f9c659a8eda896547804c4745c1b7e3cb91b6 Any computer that has this package installed or running should be considered...

Malicious code in wallet-adapter-demo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41c88a5f680ce3b7a91cc33acc9f9c659a8eda896547804c4745c1b7e3cb91b6 Any computer that has this package installed or running should be considered...

@convexitydmcc/wallet-adapter-walletconnect (>=2.0.0-beta.26, <=2.0.0-rc.5), @renec-foundation/gasless-sdk (>=0.2.3, <=0.2.6) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.48.0)

@solana/web3.js NPM version 1.48.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @convexitydmcc/wallet-adapter-walletconnect =2.0.0-beta.26, =0.2.3, =3.0.0-beta.1, =6.3.0-profits-mercurial-rc8 Source cves:...

@civic/multichain-connect-react-solana-wallet-adapter (>=0.0.0-alpha.1, <=0.0.3-beta.11), @debridge-finance/dln-client (>=5.1.0, <=8.2.2) +6 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.76.0)

@solana/web3.js NPM version 1.76.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @civic/multichain-connect-react-solana-wallet-adapter =0.0.0-alpha.1, =5.1.0, =2.11.0-alpha.0, =1.0.0, =0.1.1-alpha.8,...

Malicious code in chain-reserve-wallet-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c28bb699b4551bcbe4f9b11de514d30ba2f40f371cb4434d6da2d93fb00e5413 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1872 Malicious code in chain-reserve-wallet-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c28bb699b4551bcbe4f9b11de514d30ba2f40f371cb4434d6da2d93fb00e5413 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...