Safety
1 incident, 0 live.
0 drains in the last 12 months
0 drains in the last 12 months
0 drains in the last 12 months
1 drains in 2025
1 drains in 2025
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½
Less More
Past
July 2025 1
-
AI-written npm package @kodane/patch-manager drained Solana wallets after 1,500+ downloads
On 28 July 2025 an npm package called @kodane/patch-manager, posing as a license-validation and registry cache tool for Node.js, was published with a hidden wallet drainer in its install script. Once installed it looked for crypto wallets on Windows, macOS and Linux and sent the funds to a Solana address, leaving just enough for fees. It was downloaded more than 1,500 times before npm flagged it on 30 July; Safety, which found it, said the code appears to be largely AI-generated. No total loss was published.
npm package @kodane/patch-manager·Solana·Since Jul 28, 2025·
No drains match these filters.