{
 "tag": "claude",
 "name": "Claude",
 "group": "Other",
 "incidents": [
  {
   "slug": "latinum-wallet-mcp-pypi-solana-key-exfiltration-mar-2026",
   "title": "Solana wallet MCP server on PyPI sent users' private keys to a remote server",
   "url": "https://drains.watch/i/latinum-wallet-mcp-pypi-solana-key-exfiltration-mar-2026",
   "json": "https://drains.watch/i/latinum-wallet-mcp-pypi-solana-key-exfiltration-mar-2026.json",
   "status": "closed",
   "severity": "medium",
   "threatStatus": "partly-contained",
   "verification": "verified",
   "ai": {
    "role": "agent-target",
    "note": "The package was an MCP wallet server for AI agents; it auto-registered itself as an MCP server for Claude and sent the Solana private key to a remote server."
   },
   "chains": [
    "solana"
   ],
   "method": "supply-chain",
   "product": "latinum-wallet-mcp (PyPI)",
   "tags": [
    "solana",
    "supply-chain",
    "mcp",
    "mcp-server",
    "pypi",
    "claude",
    "ai-agent",
    "private-key",
    "ai"
   ],
   "amountUsd": null,
   "victims": null,
   "startedAt": "2026-03-31",
   "closedAt": "2026-03-31",
   "updatedAt": "2026-03-31T12:00:00Z",
   "summary": "An advisory published on 31 March 2026 flagged latinum-wallet-mcp, a PyPI package that runs a Solana wallet as an MCP server for AI agents, as malicious. From version 0.0.32 it sent the wallet's private key, along with other metrics, to a remote server during wallet setup, and from 0.0.34 it added itself as an MCP server for Claude on import; none of this was in the public GitHub code. Versions 0.0.32 to 0.0.36 are listed as affected. Anyone who installed them should treat that Solana key as stolen and move funds to a new wallet."
  },
  {
   "slug": "promptmink-ai-assisted-commit-malicious-npm-trading-agent-apr-2026",
   "title": "Claude-assisted commit adds a North Korea-linked wallet-stealing npm package to an AI crypto trading agent",
   "url": "https://drains.watch/i/promptmink-ai-assisted-commit-malicious-npm-trading-agent-apr-2026",
   "json": "https://drains.watch/i/promptmink-ai-assisted-commit-malicious-npm-trading-agent-apr-2026.json",
   "status": "closed",
   "severity": "medium",
   "threatStatus": "active",
   "verification": "verified",
   "ai": {
    "role": "agent-target",
    "note": "The malicious dependency entered an AI trading agent through a commit co-authored by Claude Opus, and ReversingLabs assesses the attackers wrote promotional package pages to lure AI coding agents."
   },
   "chains": [
    "solana"
   ],
   "method": "supply-chain",
   "product": "AI trading agent projects and Web3 developers on npm",
   "tags": [
    "solana",
    "supply-chain",
    "npm",
    "pypi",
    "ai-coding-agent",
    "claude",
    "ai-trading-bot",
    "famous-chollima",
    "north-korea",
    "dprk",
    "promptmink",
    "ai"
   ],
   "amountUsd": null,
   "victims": null,
   "startedAt": "2026-02-28",
   "closedAt": "2026-04-29",
   "updatedAt": "2026-04-29T12:00:00Z",
   "summary": "ReversingLabs reported on 29 April 2026 that a 28 February commit to openpaw-graveyard, an autonomous crypto trading agent built for Solana, was co-authored by Claude Opus and added a bait package (@solana-launchpad/sdk) that silently pulled in the malicious @validate-sdk/v2. The payload steals .env and JSON files and crypto wallet credentials, and adds attacker SSH keys for remote access. ReversingLabs ties the campaign, 60+ packages and 300+ versions over about seven months, to North Korea's Famous Chollima and believes it deliberately targets AI coding agents. No losses were reported; check lockfiles for the named packages and rotate keys on affected machines."
  },
  {
   "slug": "kodane-patch-manager-ai-generated-solana-drainer-npm-jul-2025",
   "title": "AI-written npm package @kodane/patch-manager drained Solana wallets after 1,500+ downloads",
   "url": "https://drains.watch/i/kodane-patch-manager-ai-generated-solana-drainer-npm-jul-2025",
   "json": "https://drains.watch/i/kodane-patch-manager-ai-generated-solana-drainer-npm-jul-2025.json",
   "status": "closed",
   "severity": "high",
   "threatStatus": "contained",
   "verification": "verified",
   "ai": {
    "role": "ai-malware",
    "note": "Safety's researchers say the code appears largely AI-generated, citing emojis, heavy comments and logging they link to Anthropic's Claude; this is an inference from code style."
   },
   "chains": [
    "solana"
   ],
   "method": "supply-chain",
   "product": "npm package @kodane/patch-manager",
   "tags": [
    "solana",
    "supply-chain",
    "npm",
    "kodane",
    "ai-generated-code",
    "claude",
    "wallet-drainer",
    "postinstall",
    "safety",
    "railway",
    "ai"
   ],
   "amountUsd": null,
   "victims": null,
   "startedAt": "2025-07-28",
   "closedAt": "2025-07-30",
   "updatedAt": "2025-08-01T12:00:00Z",
   "summary": "On 28 July 2025 an npm package called @kodane/patch-manager, posing as a license-validation and registry cache tool for Node.js, was published with a hidden wallet drainer in its install script. Once installed it looked for crypto wallets on Windows, macOS and Linux and sent the funds to a Solana address, leaving just enough for fees. It was downloaded more than 1,500 times before npm flagged it on 30 July; Safety, which found it, said the code appears to be largely AI-generated. No total loss was published."
  }
 ],
 "changes": [
  {
   "incident": "promptmink-ai-assisted-commit-malicious-npm-trading-agent-apr-2026",
   "incidentTitle": "Claude-assisted commit adds a North Korea-linked wallet-stealing npm package to an AI crypto trading agent",
   "severity": "medium",
   "status": "closed",
   "threatStatus": "active",
   "date": "2026-04-29",
   "title": "ReversingLabs published its findings and linked the campaign to Famous Chollima.",
   "sourceUrl": "https://www.reversinglabs.com/blog/claude-promptmink-malware-crypto",
   "url": "https://drains.watch/i/promptmink-ai-assisted-commit-malicious-npm-trading-agent-apr-2026"
  },
  {
   "incident": "latinum-wallet-mcp-pypi-solana-key-exfiltration-mar-2026",
   "incidentTitle": "Solana wallet MCP server on PyPI sent users' private keys to a remote server",
   "severity": "medium",
   "status": "closed",
   "threatStatus": "partly-contained",
   "date": "2026-03-31",
   "title": "Malicious-package advisory MAL-2026-2315 was published for latinum-wallet-mcp versions 0.0.32 to 0.0.36.",
   "sourceUrl": "https://osv.dev/vulnerability/MAL-2026-2315",
   "url": "https://drains.watch/i/latinum-wallet-mcp-pypi-solana-key-exfiltration-mar-2026"
  },
  {
   "incident": "promptmink-ai-assisted-commit-malicious-npm-trading-agent-apr-2026",
   "incidentTitle": "Claude-assisted commit adds a North Korea-linked wallet-stealing npm package to an AI crypto trading agent",
   "severity": "medium",
   "status": "closed",
   "threatStatus": "active",
   "date": "2026-02-28",
   "title": "A commit co-authored by Claude Opus added @solana-launchpad/sdk to the openpaw-graveyard trading agent, pulling in the malicious @validate-sdk/v2.",
   "sourceUrl": "https://www.reversinglabs.com/blog/claude-promptmink-malware-crypto",
   "url": "https://drains.watch/i/promptmink-ai-assisted-commit-malicious-npm-trading-agent-apr-2026"
  },
  {
   "incident": "kodane-patch-manager-ai-generated-solana-drainer-npm-jul-2025",
   "incidentTitle": "AI-written npm package @kodane/patch-manager drained Solana wallets after 1,500+ downloads",
   "severity": "high",
   "status": "closed",
   "threatStatus": "contained",
   "date": "2025-08-01",
   "title": "The Register reported more than 1,500 downloads and the signs of AI-written code.",
   "sourceUrl": "https://www.theregister.com/2025/08/01/emoji_use_ai_malware/",
   "url": "https://drains.watch/i/kodane-patch-manager-ai-generated-solana-drainer-npm-jul-2025"
  },
  {
   "incident": "kodane-patch-manager-ai-generated-solana-drainer-npm-jul-2025",
   "incidentTitle": "AI-written npm package @kodane/patch-manager drained Solana wallets after 1,500+ downloads",
   "severity": "high",
   "status": "closed",
   "threatStatus": "contained",
   "date": "2025-07-31",
   "title": "Safety published its analysis, including the attacker's Solana address and an open command server.",
   "sourceUrl": "https://www.getsafety.com/blog-posts/threat-actor-uses-ai-to-create-a-better-crypto-wallet-drainer",
   "url": "https://drains.watch/i/kodane-patch-manager-ai-generated-solana-drainer-npm-jul-2025"
  },
  {
   "incident": "kodane-patch-manager-ai-generated-solana-drainer-npm-jul-2025",
   "incidentTitle": "AI-written npm package @kodane/patch-manager drained Solana wallets after 1,500+ downloads",
   "severity": "high",
   "status": "closed",
   "threatStatus": "contained",
   "date": "2025-07-30",
   "title": "npm marked the package as malicious.",
   "sourceUrl": "https://www.getsafety.com/blog-posts/threat-actor-uses-ai-to-create-a-better-crypto-wallet-drainer",
   "url": "https://drains.watch/i/kodane-patch-manager-ai-generated-solana-drainer-npm-jul-2025"
  },
  {
   "incident": "kodane-patch-manager-ai-generated-solana-drainer-npm-jul-2025",
   "incidentTitle": "AI-written npm package @kodane/patch-manager drained Solana wallets after 1,500+ downloads",
   "severity": "high",
   "status": "closed",
   "threatStatus": "contained",
   "date": "2025-07-28",
   "title": "The package was first published to npm; 19 versions followed over two days.",
   "sourceUrl": "https://www.getsafety.com/blog-posts/threat-actor-uses-ai-to-create-a-better-crypto-wallet-drainer",
   "url": "https://drains.watch/i/kodane-patch-manager-ai-generated-solana-drainer-npm-jul-2025"
  }
 ]
}