{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "@solana/web3.js npm package backdoored to steal private keys · updates",
  "home_page_url": "https://pwn.watch/i/solana-web3-js-npm-compromise-cve-2024-54134",
  "feed_url": "https://pwn.watch/i/solana-web3-js-npm-compromise-cve-2024-54134/feed.json",
  "description": "A publish-access account for @solana/web3.js was compromised. Malicious versions 1.95.6 and 1.95.7, live on npm from 15:20 to 20:25 UTC on 2024-12-03, exfiltrated private key material from apps and bots that handle keys directly. Non-custodial wallets were generally not affected. Fixed in 1.95.8.",
  "language": "en",
  "_pwn": {
    "slug": "solana-web3-js-npm-compromise-cve-2024-54134",
    "severity": "high",
    "status": "closed",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/solana-web3-js-npm-compromise-cve-2024-54134/feed.xml",
    "llms": "https://pwn.watch/i/solana-web3-js-npm-compromise-cve-2024-54134/llms.txt",
    "json": "https://pwn.watch/i/solana-web3-js-npm-compromise-cve-2024-54134.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/solana-web3-js-npm-compromise-cve-2024-54134#2024-12-04-0b655313",
      "url": "https://pwn.watch/i/solana-web3-js-npm-compromise-cve-2024-54134#2024-12-04-0b655313",
      "title": "@solana/web3.js npm package backdoored to steal private keys: GitHub advisory GHSA-jcxm-7wvp-g6p5 published; upgrade to 1.95.8",
      "content_text": "@solana/web3.js npm package backdoored to steal private keys: GitHub advisory GHSA-jcxm-7wvp-g6p5 published; upgrade to 1.95.8\n\nSource: https://github.com/solana-labs/solana-web3.js/security/advisories/GHSA-jcxm-7wvp-g6p5",
      "date_published": "2024-12-04T00:00:00.000Z",
      "external_url": "https://github.com/solana-labs/solana-web3.js/security/advisories/GHSA-jcxm-7wvp-g6p5",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/solana-web3-js-npm-compromise-cve-2024-54134#2024-12-03-a3027d5a",
      "url": "https://pwn.watch/i/solana-web3-js-npm-compromise-cve-2024-54134#2024-12-03-a3027d5a",
      "title": "@solana/web3.js npm package backdoored to steal private keys: Malicious 1.95.6 and 1.95.7 published to npm (15:20-20:25 UTC), then unpublished",
      "content_text": "@solana/web3.js npm package backdoored to steal private keys: Malicious 1.95.6 and 1.95.7 published to npm (15:20-20:25 UTC), then unpublished\n\nSource: https://github.com/solana-labs/solana-web3.js/security/advisories/GHSA-jcxm-7wvp-g6p5",
      "date_published": "2024-12-03T00:00:00.000Z",
      "external_url": "https://github.com/solana-labs/solana-web3.js/security/advisories/GHSA-jcxm-7wvp-g6p5",
      "tags": [
        "high"
      ]
    }
  ]
}