Three malicious packages named “solanacore,” “solana-login,” and “walletcore-gen” have been found on the npmjs.com registry targeting Solana crypto developers with Windows malware. Unlike typical crypto-stealer packages, they plainly show their intent to collect keylogging and other sensitive data, rather than attempting to hide their true nature. The packages use Slack web hooks and ImgBB APIs to transfer the collected data to external actors. The packages have been downloaded over 1,900 times.
New Triada comes preinstalled on Android devices
A new variant of the Triada Trojan has been discovered pre-installed on Android devices, enabling data theft from the moment the device is set up,
