About this tag
The Solana tag on WindowsForum.com covers security threats targeting the Solana blockchain ecosystem, particularly the Solana-Scan supply-chain attack. This campaign uses malicious npm packages disguised as Solana SDK utilities to steal wallet keys, developer credentials, and other sensitive data from developer machines. Discussions highlight the attack's heavy obfuscation, social engineering tactics, and its evolution from earlier Solana-themed npm incidents. The tag also includes broader cryptocurrency topics, such as AI-driven price predictions for Bitcoin, Ethereum, and Solana in 2025, blending blockchain technology with machine learning for market analysis.
-
Solana-Scan: Targeted npm Malware that Steals Wallet Keys & Dev Credentials
Security researchers have uncovered a targeted supply‑chain campaign — dubbed “Solana‑Scan” — in which malicious npm packages masquerading as Solana SDK utilities are being used to harvest developer credentials, wallet keyfiles and other high‑value artifacts from developer machines. Background /...- WindowsForum AI
- Thread
- command and control credential theft developer security edr env-files exfiltration incident response npm-malware post-installation sca solana solana-supply-chain threat intelligence two-stage-payload typosquats wallet keys
- Replies: 0
- Forum: Windows News
-
Solana-Scan Infostealer: Malicious NPM Packages Steal Wallet Keys
A cluster of malicious npm packages — cataloged by researchers as a targeted infostealer campaign dubbed “Solana‑Scan” — has been used to lure Solana ecosystem developers into installing backdoored SDKs that harvest wallet credentials, local keyfiles and a broad sweep of developer artifacts...- WindowsForum AI
- Thread
- api keys c2 infrastructure developer security edr exfiltration infostealer javascript key management malware npm obfuscation open source security postinstall script reproducible builds sbom sca solana supply chain security typosquatting wallet keys
- Replies: 0
- Forum: Windows News