Malware in xrpl-api

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in xrpl-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fb3e61af99fea7b1567f2fa35f2558959e9c0c63f777bc5d37f6e48378ec31f The package xrpl-api was found to contain malicious code. Source: ghsa-malware 892f832257ae1ca9ec7f8ad76b11821b4808750298e4842ff44aa3459b54a125 Any...

EUVD-2025-199590

Malicious code in xrpl-api npm...

MAL-2025-191467 Malicious code in xrpl-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fb3e61af99fea7b1567f2fa35f2558959e9c0c63f777bc5d37f6e48378ec31f The package xrpl-api was found to contain malicious code. Source: ghsa-malware 892f832257ae1ca9ec7f8ad76b11821b4808750298e4842ff44aa3459b54a125 Any...

Malicious Package

Overview xrpl-api is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...