Mastodawn

New Research: 5 malicious npm packages typosquatting #crypto libraries steal private keys via Telegram, targeting #Solana and #Ethereum devs.

(Unrelated to recent TeamPCP attacks):

https://socket.dev/blog/5-malicious-npm-packages-typosquat-solana-and-ethereum-libraries-steal-private-keys #NodeJS

5 Malicious npm Packages Typosquat Solana and Ethereum Libra...

Five malicious npm packages typosquatting crypto libraries steal private keys via Telegram, targeting Solana and Ethereum developers, with active C2 i...

Socket