sol-wallet-adapter is malicious. Its code runs at install and can read the secrets of the machine.

npm

Details

Safe
after 1.0.7 · after 1.0.1 · after 1.0.0
Advisories
1 in 120 days

Used by

Stacks that pull this package.

Solana Wallet Adapter

Alerts(1)

Malicious code in sol-wallet-adapter (npm)

sol-wallet-adapter · 2 Nov

Critical
Conditions could not be extracted

Source summary

sol-wallet-adapter takes the unscoped name of @project-serum/sol-wallet-adapter and has no functional code. Its preinstall script runs node preinstall.js on npm install, which POSTs the machine's hostname, the OS username and the local time to the Discord webhook https://canary.discord.com/api/webhooks/1566232728179843243/pM5rDIrCRrEpQRbA7ibaiQk1XOQlIftmBacA5s8jD8NvXn5W-rS832DOWHQS-G-j3N6U as "PC Notifier". Versions 1.0.0 and 1.0.1 were published on 2026-11-01 by the npm account cutekitten05; after they were removed, the account bigdevin55 re-created the name and published 1.0.7 with the…

Affected
sol-wallet-adapter 1.0.0 · sol-wallet-adapter 1.0.1 · sol-wallet-adapter 1.0.7
Fixed in
after 1.0.7 · after 1.0.1 · after 1.0.0
ID
GHSA-j62h-2r3r-ggh9
Open the alert