# Typosquat · Drain Watch

2 incidents, 0 live. JSON: https://drains.watch/t/typosquat.json · RSS: https://drains.watch/t/typosquat/feed.xml

- [Zscaler: live web campaigns hide prompt injections telling browsing AI agents to make crypto payments](https://drains.watch/i/zscaler-web-prompt-injection-ai-agent-crypto-payments-jul-2026) (closed, Low, Still active, since Jul 6, 2026)
- [Five typosquatted npm packages hook Base58 decoding to steal Solana and Ethereum private keys](https://drains.watch/i/npm-galedonovan-solana-key-stealers-mar-2026) (closed, Medium, Partly contained, since Mar 26, 2026)