Threats Tagged 'mal-2026-13354'
View all threats tagged with 'mal-2026-13354'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'mal-2026-13354'
Click on any threat for detailed analysis and mitigation recommendations
Malicious code in web3-utils-crypto (npm) 0 The npm package web3-utils-crypto impersonates the legitimate web3-utils library and includes stub wallet APIs that return non-functional values. When loaded, it collects extensive environment information including environment variables, system details, and package metadata, then exfiltrates this data via an HTTPS request to a Telegram bot controlled by the attacker. This can lead to leakage of sensitive credentials such as AWS keys, GitHub tokens, and database passwords from developer and CI environments. The malicious behavior is triggered on require(), and a temporary flag file prevents repeated data exfiltration. The affected version is 1.10.4. Join the discussion | GCVE Database | 08/05/2026, 15:39:42 UTC Added: 08/05/2026, 18:46:56 UTC |
Showing 1 to 1 of 1 result