solanacore@0.0.1-security vulnerabilities

security holding package

  • latest version

    0.0.1-security

  • first published

    1 days ago

  • latest version published

    1 days ago

  • licenses detected

  • Direct Vulnerabilities

    Known vulnerabilities in the solanacore package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • C
    Malicious Package

    solanacore is a malicious package. This package contains malicious code that targets Solana crypto developers with Windows trojans and malware capable of keylogging and sensitive data exfiltration. Furthermore, these packages abuse Slack web hooks and ImgBB APIs to transfer collected data to external actors.

    How to fix Malicious Package?

    Avoid using all malicious instances of the solanacore package.

    *