AI-Generated Malware Drains Solana Wallets: Over 1,500 Downloads Before Takedown!
The AI-generated npm package @kodane/patch-manager masqueraded as a helpful tool but was actually a Solana wallet drainer. With over 1,500 downloads, this sneaky malware demonstrated AI’s knack for crafting convincing code—complete with emojis and “enhanced” features—proving even digital wallets aren’t safe from AI’s mischievous creativity.
Hot Take:
Move over, Skynet! AI’s new gig isn’t world domination, but emptying your crypto wallet. Who knew that “Enhanced” meant “Extra Sneaky” in AI language? If your Solana wallet suddenly feels lighter, you might want to check if it’s been “Enhanced” by our friend Kodane.
Key Points:
- Over 1,500 downloads of a malicious AI-generated npm package targeting Solana wallets.
- Disguised as a legitimate package, it uses postinstall scripts to hide its malicious intent.
- Operates via an open C2 server to log and execute cryptocurrency theft.
- AI involvement evident from structured markdowns, excessive logs, and “Enhanced” labels.
- Malware is attributed to an unknown developer, potentially from Russia, China, or India.
Already a member? Log in here