MalwarePublished 6 Aug 2026

wallet-monitor-snap (npm) · Malicious Code

Affects wallet-monitor-snapSource GCVE Database

Malicious package : remove wallet-monitor-snap and rotate any secrets on hosts that installed it.

Data as of 6 Aug 2026, 18:45 UTC

Classification

Malicious package

Published to npm · OSV MAL-2026-13393

What to do

Remove wallet-monitor-snap from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
npmwallet-monitor-snap	Affected =1.0.2 =1.0.4	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The wallet-monitor-snap package for MetaMask contains malicious code that tricks users into revealing their Secret Recovery Phrase. It presents a fake security alert within MetaMask's trusted UI, prompting users to enter their seed phrase, which is then captured and sent to any invoking decentralized application. The package uses benign RPC methods as a cover to appear legitimate during store review. This compromises any HD wallet accounts derived from the stolen phrase, giving full control to the attacker.

Impact

An attacker controlling a dapp that can invoke the snap's RPC methods can trick users into revealing their Secret Recovery Phrase. This results in complete compromise of the user's HD wallet accounts, enabling theft of funds and unauthorized transactions.

Defensive guidance

Until a fix or removal is confirmed, users should avoid installing or using wallet-monitor-snap versions 1.0.2 and 1.0.4. Users who have entered their seed phrase in response to this snap should consider their wallets compromised and take appropriate recovery actions such as transferring assets to a new wallet with a new seed phrase.

Summary

wallet-monitor-snap is a MetaMask Snap that implements a malicious 'showSecurityAlert' method in its onRpcRequest handler. This method opens a dialog inside MetaMask's trusted UI, falsely warning users of unusual activity and requesting their Secret Recovery Phrase (BIP-39 mnemonic). The entered seed phrase is returned to the calling dapp as '{ captured: result }'. The snap declares 'endowment:rpc' with 'dapps: true', allowing any web origin that can reach the snap to invoke this method and receive the seed phrase. In-source comments reveal that advertised RPC methods like 'ping' and 'estimateGas' are decoys to appear legitimate during store review. Compromise of the seed phrase leads to full control over any HD wallet accounts derived from it.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 6 Aug 2026, 18:45 UTC

Technical details

References

Community reviews