# Telegram C2 · Drain Watch 1 incidents, 0 live. JSON: https://drains.watch/t/telegram-c2.json · RSS: https://drains.watch/t/telegram-c2/feed.xml - [Five typosquatted npm packages hook Base58 decoding to steal Solana and Ethereum private keys](https://drains.watch/i/npm-galedonovan-solana-key-stealers-mar-2026) (closed, Medium, Partly contained, since Mar 26, 2026)