Jul 31, 2025
0 new drains, 1 update.
Updated
-
AI-written npm package @kodane/patch-manager drained Solana wallets after 1,500+ downloads
On 28 July 2025 an npm package called @kodane/patch-manager, posing as a license-validation and registry cache tool for Node.js, was published with a hidden wallet drainer in its install script. Once installed it looked for crypto wallets on Windows, macOS and Linux and sent the funds to a Solana address, leaving just enough for fees. It was downloaded more than 1,500 times before npm flagged it on 30 July; Safety, which found it, said the code appears to be largely AI-generated. No total loss was published.
npm package @kodane/patch-manager·Solana·Since Jul 28, 2025·