1#!/usr/bin/env node
L2: var uT=Object.defineProperty;var E=(_,e)=>uT(_,"name",{value:e,configurable:!0}),pT=(_=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(_,{get:(e,t)=>(typeof require<"u"?requ...
L3: Please set DISCORD_WEBHOOK_URL in .env`);let t={content:_,username:"\u{1FA84} Solv Notifier"};return(await ea(e.DISCORD_WEBHOOK_URL,{method:"POST",body:JSON.stringify(t),headers:{"...
CriticalSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
dist/index.jsView on unpkg · L1 1#!/usr/bin/env node
L2: var uT=Object.defineProperty;var E=(_,e)=>uT(_,"name",{value:e,configurable:!0}),pT=(_=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(_,{get:(e,t)=>(typeof require<"u"?requ...
L3: Please set DISCORD_WEBHOOK_URL in .env`);let t={content:_,username:"\u{1FA84} Solv Notifier"};return(await ea(e.DISCORD_WEBHOOK_URL,{method:"POST",body:JSON.stringify(t),headers:{"...
L4: Account: ${s.pubkey}
...
L5797: at the NOTICE level to the logger. E.g. for a typical fd_log
L5798: `;return{filePath:_,body:e}},"modDiff"),vt=ha;var Ht=E(async(_,e,t=!1)=>{let o=_.NETWORK===O.TESTNET,i=e||(o?le:w_),n=t||_.MOD,{filePath:s,body:r}=vt();n?(H("git -C /home/solv/fire...
L5799: exec agave-validator \\
...
L6155:
L6156: $ solv jupiter --help`))},"jupiterAPISetup"),En=DS;import{spa
CriticalWallet Drain
Source uses private key material to transfer cryptocurrency funds.
dist/index.jsView on unpkg · L1 1#!/usr/bin/env node
L2: var uT=Object.defineProperty;var E=(_,e)=>uT(_,"name",{value:e,configurable:!0}),pT=(_=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(_,{get:(e,t)=>(typeof require<"u"?requ...
L3: Please set DISCORD_WEBHOOK_URL in .env`);let t={content:_,username:"\u{1FA84} Solv Notifier"};return(await ea(e.DISCORD_WEBHOOK_URL,{method:"POST",body:JSON.stringify(t),headers:{"...
L4: Account: ${s.pubkey}
...
L5797: at the NOTICE level to the logger. E.g. for a typical fd_log
L5798: `;return{filePath:_,body:e}},"modDiff"),vt=ha;var Ht=E(async(_,e,t=!1)=>{let o=_.NETWORK===O.TESTNET,i=e||(o?le:w_),n=t||_.MOD,{filePath:s,body:r}=vt();n?(H("git -C /home/solv/fire...
L5799: exec agave-validator \\
...
L6155:
L6156: $ solv jupiter --help`))},"jupiterAPISetup"),En=DS;import{spa
CriticalDownload Execute
Source downloads or fetches remote code and executes it.
dist/index.jsView on unpkg · L1 1Trigger-reachable chain: scripts.start -> dist/index.js
L1: #!/usr/bin/env node
L2: var uT=Object.defineProperty;var E=(_,e)=>uT(_,"name",{value:e,configurable:!0}),pT=(_=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(_,{get:(e,t)=>(typeof require<"u"?requ...
L3: Please set DISCORD_WEBHOOK_URL in .env`);let t={content:_,username:"\u{1FA84} Solv Notifier"};return(await ea(e.DISCORD_WEBHOOK_URL,{method:"POST",body:JSON.stringify(t),headers:{"...
L4: Account: ${s.pubkey}
...
L5797: at the NOTICE level to the logger. E.g. for a typical fd_log
L5798: `;return{filePath:_,body:e}},"modDiff"),vt=ha;var Ht=E(async(_,e,t=!1)=>{let o=_.NETWORK===O.TESTNET,i=e||(o?le:w_),n=t||_.MOD,{filePath:s,body:r}=vt();n?(H("git -C /home/solv/fire...
L5799: exec agave-validator \\
...
L6155:
L6156: $ sol
CriticalTrigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.jsView on unpkg · L1 1#!/usr/bin/env node
L2: var uT=Object.defineProperty;var E=(_,e)=>uT(_,"name",{value:e,configurable:!0}),pT=(_=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(_,{get:(e,t)=>(typeof require<"u"?requ...
L3: Please set DISCORD_WEBHOOK_URL in .env`);let t={content:_,username:"\u{1FA84} Solv Notifier"};return(await ea(e.DISCORD_WEBHOOK_URL,{method:"POST",body:JSON.stringify(t),headers:{"...
HighChild Process
Package source references child process execution.
dist/index.jsView on unpkg · L1 1#!/usr/bin/env node
L2: var uT=Object.defineProperty;var E=(_,e)=>uT(_,"name",{value:e,configurable:!0}),pT=(_=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(_,{get:(e,t)=>(typeof require<"u"?requ...
L3: Please set DISCORD_WEBHOOK_URL in .env`);let t={content:_,username:"\u{1FA84} Solv Notifier"};return(await ea(e.DISCORD_WEBHOOK_URL,{method:"POST",body:JSON.stringify(t),headers:{"...
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
var uT=Object.defineProperty;var E=(_,e)=>uT(_,"name",{value:e,configurable:!0}),pT=(_=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(_,{get:(e,t)=>(typeof require<"u"?requ...
Please set DISCORD_WEBHOOK_URL in .env`);let t={content:_,username:"\u{1FA84} Solv Notifier"};return(await ea(e.DISCORD_WEBHOOK_URL,{method:"POST",body:JSON.stringify(t),headers:{"...
_ _`;await A_(M)}else{let P=`**${T}** failed to catch up after update`;await A_(P)}return d}return!0},"autoUpdate"),Pi=Ca;import{homedir as da}from"os";import{readFile as la,writeF...
`;return{filePath:_,body:e}},"modDiff"),vt=ha;var Ht=E(async(_,e,t=!1)=>{let
HighCredential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/index.jsView on unpkg 1#!/usr/bin/env node
L2: var uT=Object.defineProperty;var E=(_,e)=>uT(_,"name",{value:e,configurable:!0}),pT=(_=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(_,{get:(e,t)=>(typeof require<"u"?requ...
L3: Please set DISCORD_WEBHOOK_URL in .env`);let t={content:_,username:"\u{1FA84} Solv Notifier"};return(await ea(e.DISCORD_WEBHOOK_URL,{method:"POST",body:JSON.stringify(t),headers:{"...
L4: Account: ${s.pubkey}
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/index.jsView on unpkg · L1 1#!/usr/bin/env node
L2: var uT=Object.defineProperty;var E=(_,e)=>uT(_,"name",{value:e,configurable:!0}),pT=(_=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(_,{get:(e,t)=>(typeof require<"u"?requ...
L3: Please set DISCORD_WEBHOOK_URL in .env`);let t={content:_,username:"\u{1FA84} Solv Notifier"};return(await ea(e.DISCORD_WEBHOOK_URL,{method:"POST",body:JSON.stringify(t),headers:{"...
L4: Account: ${s.pubkey}
...
L5797: at the NOTICE level to the logger. E.g. for a typical fd_log
L5798: `;return{filePath:_,body:e}},"modDiff"),vt=ha;var Ht=E(async(_,e,t=!1)=>{let o=_.NETWORK===O.TESTNET,i=e||(o?le:w_),n=t||_.MOD,{filePath:s,body:r}=vt();n?(H("git -C /home/solv/fire...
L5799: exec agave-validator \\
...
L6155:
L6156: $ solv jupiter --help`))},"jupiterAPISetup"),En=DS;import{spa
HighSandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/index.jsView on unpkg · L1 1Trigger-reachable command-output exfiltration chain: scripts.start -> dist/index.js
L1: #!/usr/bin/env node
L2: var uT=Object.defineProperty;var E=(_,e)=>uT(_,"name",{value:e,configurable:!0}),pT=(_=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(_,{get:(e,t)=>(typeof require<"u"?requ...
L3: Please set DISCORD_WEBHOOK_URL in .env`);let t={content:_,username:"\u{1FA84} Solv Notifier"};return(await ea(e.DISCORD_WEBHOOK_URL,{method:"POST",body:JSON.stringify(t),headers:{"...
L4: Account: ${s.pubkey}
HighTrigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/index.jsView on unpkg · L1 1Trigger-reachable persistence chain: scripts.start -> dist/index.js
L1: #!/usr/bin/env node
L2: var uT=Object.defineProperty;var E=(_,e)=>uT(_,"name",{value:e,configurable:!0}),pT=(_=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(_,{get:(e,t)=>(typeof require<"u"?requ...
L3: Please set DISCORD_WEBHOOK_URL in .env`);let t={content:_,username:"\u{1FA84} Solv Notifier"};return(await ea(e.DISCORD_WEBHOOK_URL,{method:"POST",body:JSON.stringify(t),headers:{"...
L4: Account: ${s.pubkey}
...
L5797: at the NOTICE level to the logger. E.g. for a typical fd_log
L5798: `;return{filePath:_,body:e}},"modDiff"),vt=ha;var Ht=E(async(_,e,t=!1)=>{let o=_.NETWORK===O.TESTNET,i=e||(o?le:w_),n=t||_.MOD,{filePath:s,body:r}=vt();n?(H("git -C /home/solv/fire...
L5799: exec agave-validator \\
...
L6155:
HighTrigger Reachable Persistence
A manifest entrypoint or package-local install chain reaches persistence behavior.
dist/index.jsView on unpkg · L1 •matchType = normalized_sha256
matchedPackage = @gabrielhicks/solv@5.8.42
matchedPath = dist/index.js
matchedIdentity = npm:QGdhYnJpZWxoaWNrcy9zb2x2:5.8.42
similarity = 1.000
summary = normalized source hash matched finalized malicious source
HighKnown Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/index.jsView on unpkg •matchType = malicious_source_fingerprint_signature
signature = 4dd710405c1f0eb8
signatureType = suspicious_hashes
sourceLabel = final_verdict:malicious
matchedPackage = @gabrielhicks/solv@5.8.42
matchedPath = dist/index.js
matchedIdentity = npm:QGdhYnJpZWxoaWNrcy9zb2x2:5.8.42
similarity = 1.000
shingleOverlap = 1
summary = package final verdict is malicious
HighKnown Malware Source Fingerprint Signature
Source fingerprint signature matches a known malicious package signature; route for source-aware review.
dist/index.jsView on unpkg 6797patternName = generic_password
severity = medium
line = 6797
1#!/usr/bin/env node
L2: var uT=Object.defineProperty;var E=(_,e)=>uT(_,"name",{value:e,configurable:!0}),pT=(_=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(_,{get:(e,t)=>(typeof require<"u"?requ...
L3: Please set DISCORD_WEBHOOK_URL in .env`);let t={content:_,username:"\u{1FA84} Solv Notifier"};return(await ea(e.DISCORD_WEBHOOK_URL,{method:"POST",body:JSON.stringify(t),headers:{"...
L4: Account: ${s.pubkey}
...
L5797: at the NOTICE level to the logger. E.g. for a typical fd_log
L5798: `;return{filePath:_,body:e}},"modDiff"),vt=ha;var Ht=E(async(_,e,t=!1)=>{let o=_.NETWORK===O.TESTNET,i=e||(o?le:w_),n=t||_.MOD,{filePath:s,body:r}=vt();n?(H("git -C /home/solv/fire...
L5799: exec agave-validator \\
...
L6155:
L6156: $ solv jupiter --help`))},"jupiterAPISetup"),En=DS;import{spa
MediumInstall Persistence
Source writes installer persistence such as shell profile or service configuration.
dist/index.jsView on unpkg · L1 6824patternName = generic_password
severity = medium
line = 6824