Malicious versions reported for this package
- MAL-2025-16284 — all versions · Aug 14, 2025
1 result · Feed
-
Critical 9.8
Malicious Package in buffer-8or
Version 2.0.2 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user. ## Recommendation Remove the package from your environment. Ensure no Ethereum funds were compromised.