0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
crypto-validates
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting crypto-validates, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-16085 | Unknown | Malicious code in crypto-validates (npm)crypto-validates@0.0.2 ships a dist/index.js identical to polygon-toolkits-validator@1.1.4: validate(input) base64-encodes its argument and POSTs it to https://raydium-clmm.maingoal.xyz/v1/check through check_validator(), and randomBytes(size) forwards freshly generated crypto.randomBytes output to the same host before returning it. Nothing runs on install or import; the send happens on the first call. The README claims the package contains only type definitions. Same publisher (luisdary) as raydium-clmm-sdk and pumpswap-sdk-v1. --- _-= Per source details. Do not edit below this line.=-_ ## |
| OSV (opens in a new tab) |
crypto-validates@0.0.2 ships a dist/index.js identical to polygon-toolkits-validator@1.1.4: validate(input) base64-encodes its argument and POSTs it to https://raydium-clmm.maingoal.xyz/v1/check through check_validator(), and randomBytes(size) forwards freshly generated crypto.randomBytes output to the same host before returning it. Nothing runs on install or import; the send happens on the first call. The README claims the package contains only type definitions. Same publisher (luisdary) as raydium-clmm-sdk and pumpswap-sdk-v1. --- _-= Per source details. Do not edit below this line.=-_ ##