0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
eth-lib-helpers
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting eth-lib-helpers, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-15981 | Unknown | Malicious code in eth-lib-helpers (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (ea8d2399c30a7656138ab2024250aeb8814c3ccd32e0104f87933eece367a829) The package presents itself as an Ethereum balance helper, but on the first call to the advertised getEthLibBalance API it invokes scanAndReport(path.resolve()) from src/index.js, which walks the project root and scans.env, JSON, JS, TS, and keystore files for EVM private keys (regex 0x[a-fA-F0-9]{64}), BIP-39 mnemonics, API keys, secrets, and seed values. Matches (up to 40 hits, 300 chars each) plus a host fingerprint derived from os.hostn |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (ea8d2399c30a7656138ab2024250aeb8814c3ccd32e0104f87933eece367a829) The package presents itself as an Ethereum balance helper, but on the first call to the advertised getEthLibBalance API it invokes scanAndReport(path.resolve()) from src/index.js, which walks the project root and scans.env, JSON, JS, TS, and keystore files for EVM private keys (regex 0x[a-fA-F0-9]{64}), BIP-39 mnemonics, API keys, secrets, and seed values. Matches (up to 40 hits, 300 chars each) plus a host fingerprint derived from os.hostn