Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
Malicious code in solana-web3-fixed (npm) 0 --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (2d36c0e75143828e4a93135d0c54fb34dd6e75588a493ade663a1fa4b231230c) Package name 'solana-web3-fixed' resembles a fix-branded variant of the legitimate '@solana/web3.js' library, a pattern frequently used in lure/typosquat campaigns. The bundled main files (lib/index.cjs.js and lib/index.esm.js) trigger multiple keyword co-occurrence patterns associated with credential exfiltration: require('child_process') alongside POST/GET fetch calls and shell utilities (curl, ping). Without traced-code corroboration, these patterns cannot be conclusively attributed to either malicious behavior or legitimate Solana RPC / build tooling composition inside a minified bundle. Given the high-risk naming pattern (fix-branded variant of a top-tier crypto library) and the stacked critical static signals across both CJS and ESM bundles, this should be reviewed by a human before being trusted in any installer pipeline. Join the discussion | GCVE Database | 07/20/2026, 10:59:12 UTC Added: 09/01/2026, 15:45:27 UTC |
Showing 1 to 1 of 1 result