Malicious Solana Packages Exploit Slack & ImgBB to Steal Dev Data

Researchers uncovered three malicious npm packages: solanacore, solana-login, and walletcore-gen, with a combined download count exceeding 1,900, were published this month by a single user.  They have structures, files, and code that are identical to one another and contain Windows PowerShell scripts as well as a trojan.exe file that is disguised as “WebBrowser for Windows.”  … Continue reading Malicious Solana Packages Exploit Slack & ImgBB to Steal Dev Data