CERT24MAL-2026-18452 — Malicious code in sol-wallet-adapter (npm)Loading data…
CERT24Threat Observatory
Period

MAL-2026-18452 — Malicious code in sol-wallet-adapter (npm)

OpenSSF Package Analysis identified npm package sol-wallet-adapter version 1.0.7 as malicious. The package has no functional code, and its preinstall script sends the machine hostname, operating-system username, and local time to a Discord webhook.

← Back to intelligence

MAL-2026-18452 — Malicious code in sol-wallet-adapter (npm)

OpenSSF Package Analysis identified npm package sol-wallet-adapter version 1.0.7 as malicious. The package has no functional code, and its preinstall script sends the machine hostname, operating-system username, and local time to a Discord webhook.