Malicious Package Affecting walletcore-gen package, versions *
Threat Intelligence
Exploit Maturity
Snyk has a published code exploit for this vulnerability.
Mature
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-JS-WALLETCOREGEN-8603655
- published8 Jan 2025
- disclosed8 Jan 2025
- creditUnknown
Introduced: 8 Jan 2025
New Malicious CVE NOT AVAILABLE CWE-506 (opens in a new tab)Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
Avoid using all malicious instances of the walletcore-gen package.
Overview
walletcore-gen is a malicious package. This package contains malicious code that targets Solana crypto developers with Windows trojans and malware capable of keylogging and sensitive data exfiltration. Furthermore, these packages abuse Slack web hooks and ImgBB APIs to transfer collected data to external actors.