@johnruff215-dev/solana-wallet-tracker is malicious. Its code runs at install and can read the secrets of the machine.

npm

Details

Safe
none found
Advisories
1 in 120 days

Used by

Stacks that pull this package.

Solana JS SDK

Alerts(1)

Malicious code in @johnruff215-dev/solana-wallet-tracker (npm)

@johnruff215-dev/solana-wallet-tracker · 2 Nov

Critical
Conditions could not be extracted

Source summary

Malicious package. @johnruff215-dev/solana-wallet-tracker is an npm Solana cryptocurrency-wallet information stealer that exfiltrates wallet data to an attacker-controlled Discord webhook. The same Discord webhook endpoint (ID 1433690093175967776) is also used by the npm package @notrainer/nobtrainer-sdk , indicating both belong to a single actor/campaign. Classification: information stealer. The package provides no legitimate functionality, so all published versions are malicious. Full indicators are published at the reference below. --- Credit…

Affected
@johnruff215-dev/solana-wallet-tracker >=1.0.0
Fixed in
none found
ID
GHSA-w48h-24q2-rjqx
Open the alert