Skip to content
supplychainattack.orgSupply chain attack incident catalog
resolvedcritical

Malicious code in SolanaWallet (NuGet)

Malicious code was discovered in the SolanaWallet NuGet package. The incident was identified and documented by the OpenSSF malicious packages project.

ShareXLinkedInHacker News
Disclosed
Last updated
Blast radius
Unknown; depends on adoption of affected versions
Ecosystems
NuGet
Attack vectors
Compromised package
Affected entities
  • SolanaWalletNuGet package

The SolanaWallet NuGet package was found to contain malicious code. This incident was identified and cataloged by the OpenSSF's malicious packages project, which maintains a repository of known malicious software supply chain incidents.\n\nThe malicious package was published to the NuGet package registry, potentially affecting any developers or applications that downloaded and used the compromised versions. The incident was assigned identifier MAL-2024-4648 in the OpenSSF malicious packages database.\n\nNo specific technical details about the malicious payload, affected versions, or remediation steps are provided in the source material beyond the package name and registry.

Indicators of compromise

Packages
  • SolanaWallet

Remediation

  • Remove SolanaWallet NuGet package from affected projects
  • Audit project dependencies for any use of SolanaWallet
  • Review application logs for suspicious activity if SolanaWallet was installed
  • Consult the OpenSSF malicious packages database (MAL-2024-4648) for detailed technical indicators and affected version ranges
  • Use only verified, trusted versions of Solana wallet libraries from official sources

Sources

  1. GitHub Advisory GHSA-7vjx-gxf7-8rqm · GitHub Advisory Database

Cite this entry

"Malicious code in SolanaWallet (NuGet)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed July 20, 2026; last updated July 20, 2026. https://supplychainattack.org/incident/malicious-code-in-solanawallet-nuget-1ljf27

Suggest a correction

Found an error or have a newer source? Corrections to factual errors take priority over new entries.

Related incidents

  1. resolvedcritical

    Malicious code in Ultimate.Wpf.Toolkit (NuGet)

    Multiple versions of the Ultimate.Wpf.Toolkit NuGet package contained malicious code. The incident was identified and documented by the OpenSSF malicious packages project.

    NuGetCompromised package
  2. resolvedcritical

    Malicious code in YoutubeExtractor.Net (NuGet)

    Malicious code was discovered in the YoutubeExtractor.Net NuGet package. The incident was identified and documented by the OpenSSF malicious packages project.

    NuGetCompromised package
  3. resolvedcritical

    Malicious code in Zendesk.OAuth (NuGet)

    Malicious code was discovered in multiple versions of the Zendesk.OAuth NuGet package. The incident was identified and documented by the OpenSSF malicious packages project.

    NuGetCompromised package
  4. resolvedcritical

    Malicious code in Winforms (NuGet)

    Malicious code was discovered in multiple versions of the Winforms package on NuGet. The incident was documented by the OpenSSF malicious packages project and published as GitHub advisory GHSA-wq82-5xjm-57wq.

    NuGetCompromised package