npm/@solana/web3.js

Handling untrusted input can result in a crash, leading to loss of availability / denial of service

Modified: 9/10/2026

Modified package published to npm, containing malware that exfiltrates private key material

Modified: 2/3/2026

Malicious code in @solana/web3.js (npm)

Modified: 1/22/2026