solana-labs solana-web3.js
- CVE-2024-54134 @solana/web3.js modified package published to npm, containing malware that exfiltrates private key material 0.5%
- CVE-2024-30253 Handling untrusted input can result in a crash, leading to loss of availability / denial of service 0.6%