🚨Two versions (1.95.6 and 1.95.7) of the popular solana/web3.js npm library were recently disovered to be malicious, harvesting private keys to drain wallets.
NVK (npub1az9…m8y8) , craigraw (npub1hea…g9v2) & Rob1Ham (npub1emd…c9aw) discuss the lessons to be learned from this incident in BR089.
BitcoinReview / Bitcoin.Review
npub1qd…pzclt
2024-12-27 16:35:37
Author Public Key
npub1qdcakl75gd7wv0nqmmwrz09ddm5tzl7xj8lq2gclng2qzd8up5yqjpzcltPublished at
2024-12-27 16:35:37Event JSON
{
"id": "e56a0c78b4ddc714779e7f4e9b040b4aa0cb9eea60cca743d6ce6917e6fb0a94",
"pubkey": "0371db7fd4437ce63e60dedc313cad6ee8b17fc691fe05231f9a140134fc0d08",
"created_at": 1735317337,
"kind": 1,
"tags": [
[
"p",
"e88a691e98d9987c964521dff60025f60700378a4879180dcbbb4a5027850411"
],
[
"p",
"be7a5291b532e8b918f2dc98148948a33d3e0da07788d7416f73b4c7514f08e6"
],
[
"p",
"cedab81be42ef47dbde653f4ba7ab25ac3aa32cfc2b672ee0f89c0faf882f13e"
]
],
"content": "🚨Two versions (1.95.6 and 1.95.7) of the popular solana/web3.js npm library were recently disovered to be malicious, harvesting private keys to drain wallets.\n\nnostr:npub1az9xj85cmxv8e9j9y80lvqp97crsqdu2fpu3srwthd99qfu9qsgstam8y8 , nostr:npub1hea99yd4xt5tjx8jmjvpfz2g5v7nurdqw7ydwst0ww6vw520prnq6fg9v2 \u0026 nostr:npub1emdtsxly9m68m00x206t574jttp65vk0c2m89ms038q047yz7ylqcac9aw discuss the lessons to be learned from this incident in BR089.\nhttps://m.primal.net/NITH.mov",
"sig": "7e797730f726250cf196a3bf10819331cecae33ee686ac04c267fb09fe78ed20d5dc9214db52967e17ae11ba0484a5f36dcf74e0dbf59f9973d85b552fa191c1"
}