{"id":1722,"date":"2025-01-20T09:52:01","date_gmt":"2025-01-20T09:52:01","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/2025\/01\/20\/hackers-steal-solana-wallet-keys-via-malicious-npm-packages-gmail-smtp\/"},"modified":"2025-01-20T09:52:02","modified_gmt":"2025-01-20T09:52:02","slug":"hackers-steal-solana-wallet-keys-via-malicious-npm-packages-gmail-smtp","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/hackers-steal-solana-wallet-keys-via-malicious-npm-packages-gmail-smtp\/","title":{"rendered":"Hackers Steal Solana Wallet Keys via Malicious npm Packages &#038; Gmail SMTP"},"content":{"rendered":"\n<\/p>\n<p><strong>Malicious npm Packages and PyPI Threaten Systems<\/strong><\/p>\n<p><strong>Date:<\/strong> January 20, 2025<br \/>\n<strong>Author:<\/strong> Ravie Lakshmanan<\/p>\n<p><strong>Tags:<\/strong> Supply Chain Attack \/ Solana<\/p>\n<p>Cybersecurity researchers have identified three sets of malicious packages across the npm and Python Package Index (PyPI) repository that come with capabilities to steal data and even delete sensitive data from infected systems.<\/p>\n<p>The list of identified packages is below:<\/p>\n<ul>\n<li>\n<p><strong>npm Packages:<\/strong><\/p>\n<ul>\n<li>@async-mutex\/mutex, a typosquat of async-mute<\/li>\n<li>dexscreener, which masquerades as a library for accessing liquidity pool data from decentralized exchanges (DEXs) and interacting with the DEX Screener platform<\/li>\n<li>solana-transaction-toolkit<\/li>\n<li>solana-stable-web-huks<\/li>\n<\/ul>\n<\/li>\n<li><strong>npm Packages (continued):<\/strong>\n<ul>\n<li>cschokidar-next, a typosquat of chokidar<\/li>\n<li>acho&#8230;lank<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p>On the other hand, Pycord-self singles out Python developers looking to integrate Discord APIs into their projects, capturing Discord authentication tokens and connecting to an attacker-controlled server for persistent backdoor access post installation on both Windows and Linux systems.<\/p>\n<p>The development comes as bad actors are targeting Roblox users with fraudulent libraries engineered to facilitate data theft using open-source stealer malware such as Skuld and Blank-Grabber. Last year, Imperva revealed that Roblox players on the lookout for game cheats and mods have also been targeted by bogus PyPI packages that trick them into downloading the same payloads.<\/p>\n<p><strong>Stay Informed:<\/strong><\/p>\n<p>Found this article interesting? Follow us on Twitter and LinkedIn to read more exclusive content we post.<\/p>\n\n<br \/><a href=\"https:\/\/thehackernews.com\/2025\/01\/hackers-deploy-malicious-npm-packages.html\" rel=\"nofollow noopener\" target=\"_blank\">Source Link<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Malicious npm Packages and PyPI Threaten Systems Date: January 20, 2025 Author: Ravie Lakshmanan Tags: Supply Chain Attack \/ Solana Cybersecurity researchers have identified three sets of malicious packages across&#8230;<\/p>\n","protected":false},"author":19,"featured_media":1723,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22],"tags":[46,39,32,31,33,34,35,40,36,37,42,44,43,41,38,45],"class_list":["post-1722","post","type-post","status-publish","format-standard","has-post-thumbnail","category-cybersecurity","tag-computer-security","tag-cyber-attacks","tag-cyber-news","tag-cyber-security-news","tag-cyber-security-news-today","tag-cyber-security-updates","tag-cyber-updates","tag-data-breach","tag-hacker-news","tag-hacking-news","tag-how-to-hack","tag-information-security","tag-network-security","tag-ransomware-malware","tag-software-vulnerability","tag-the-hacker-news"],"jetpack_featured_media_url":"https:\/\/fusionmindlabs.com\/blogs\/wp-content\/uploads\/sites\/9\/2025\/01\/solana.png","_links":{"self":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/1722","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/comments?post=1722"}],"version-history":[{"count":1,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/1722\/revisions"}],"predecessor-version":[{"id":1724,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/1722\/revisions\/1724"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media\/1723"}],"wp:attachment":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media?parent=1722"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/categories?post=1722"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/tags?post=1722"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}