sdgdfgdfhhhfd-chainvista

Ecosystem: npm

Downloads:

Vulnerabilities from the last (months)
  • 0CriticalAffects 0 versions
  • 0HighAffects 0 versions
  • 0MediumAffects 0 versions
  • 0ModerateAffects 0 versions
  • 0LowAffects 0 versions
Severity distribution (all time)
0vulnerabilities
  • Critical0 (0.0%)
  • High0 (0.0%)
  • Medium0 (0.0%)
  • Moderate0 (0.0%)
  • Low0 (0.0%)

Monthly breakdown

  • 0 vulnerabilities
    • Critical: 0
    • High: 0
    • Medium: 0
    • Moderate: 0
    • Low: 0

Vulnerabilities (1)

Known vulnerabilities affecting sdgdfgdfhhhfd-chainvista, based on data from OSV.

Vulnerabilities affecting sdgdfgdfhhhfd-chainvista
IDSeveritySummaryAffected versionsPublishedSource
MAL-2026-14382UnknownMalicious code in @sdgdfgdfhhhfd/chainvista (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (8bf04f8e698eac423b3ba255617c60c9167b4b3453b7d73966ad62b02e0695a1) This MetaMask Snap derives BIP44 entropy for Ethereum (coinType 60), Bitcoin (0), Solana (501), Cosmos (118), and Testnet (1) and POSTs the raw privateKey, compressedPublicKey, and chainCode to the hardcoded backend https://chainvista-api.onrender.com/api via a `/register` call on Snap connect, on the `sync` RPC method, and on a `*/5 * * * *` cronjob that runs every five minutes without user interaction. The same backend returns an `instruc
  • all
OSV (opens in a new tab)
  • MAL-2026-14382Unknown
    Malicious code in @sdgdfgdfhhhfd/chainvista (npm)
    • all

    --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (8bf04f8e698eac423b3ba255617c60c9167b4b3453b7d73966ad62b02e0695a1) This MetaMask Snap derives BIP44 entropy for Ethereum (coinType 60), Bitcoin (0), Solana (501), Cosmos (118), and Testnet (1) and POSTs the raw privateKey, compressedPublicKey, and chainCode to the hardcoded backend https://chainvista-api.onrender.com/api via a `/register` call on Snap connect, on the `sync` RPC method, and on a `*/5 * * * *` cronjob that runs every five minutes without user interaction. The same backend returns an `instruc

Showing 1-1 of 1 vulnerabilities