# Developers · Drain Watch

3 incidents, 0 live. JSON: https://drains.watch/t/developers.json · RSS: https://drains.watch/t/developers/feed.xml

- [Five typosquatted npm packages hook Base58 decoding to steal Solana and Ethereum private keys](https://drains.watch/i/npm-galedonovan-solana-key-stealers-mar-2026) (closed, Medium, Partly contained, since Mar 26, 2026)
- [Malicious 'contractshark.solidity-lang' Cursor extension steals an Ethereum core developer's private key](https://drains.watch/i/cursor-contractshark-solidity-extension-dev-key-theft-aug-2025) (closed, Medium, Partly contained, since Aug 13, 2025)
- [Fake Solidity extension for the Cursor AI code editor leads to about $500K crypto theft from a developer](https://drains.watch/i/cursor-fake-solidity-extension-500k-crypto-theft-jul-2025) (closed, High, Partly contained, since Jul 10, 2025)