Duplicate Advisory: Malware in debug
Malware
Published
Withdrawn This advisory was withdrawn on Sep 15, 2025
Affected versions
= 4.4.2
Description
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-4x49-vf9v-38px. This link is maintained to preserve external references.
Original Description
Any computer that has this package installed or running should be considered affected by a browser-based interceptor that hijacks network traffic and application APIs. The interceptor injects itself into functions related to web traffic and cryptocurrency wallets. The interceptor replaces values such as wallet addresses in transaction payloads and modifies the UI to hide its activity.
References
Published to the GitHub Advisory Database
Last updated