failIncident: Malware

Scanned:

@solana-launchpad/sdk

malicious

Research

PumpFun SDK for Solana - Independent npm module for pump.fun token operations

License: Permissive (MIT)

Published:

Visit GitHub

See on npm

SAFE Assessment

Compliance

Licenses

No license compliance issues

Secrets

No sensitive information found

Security

Vulnerabilities

No known vulnerabilities detected

Hardening

No application hardening issues

Threats

Tampering

No evidence of software tampering

Malware

1 supply chain attack artifacts

INCIDENTS FOR THIS VERSION:

malware

Reported By: ReversingLabs (Researcher)

See more info on our blog

Below is the list of direct dependencies declared by the software package through its manifest.

Name

Version

^0.30.1

^0.30.1

^1.22.5

^0.4.0

^1.89.1

^1.89.1

^5.2.1

^6.0.0

^0.11.0

^6.19.2

Did you know...

... that you can use ReversingLabs’ Spectra Assure platform to perform regular risk assessments of packages you develop in-house?

We recommend continuous software safeness monitoring through CI/CD integrations and pre-release/deployment checks. In addition to basic package information found on this page our platform offers rich reports for developers and DevSecOps that help them remediate all reported issues.