@velora-dex/sdk
Named by 2 kept items in this workspace.
Search every workspace for @velora-dex/sdk. It matches the name as written, so it can find other things that share it.
The items that name it 2
npm package version 9.4.1 contains malicious code that automatically downloads and executes a remote shell script on install.
Trojanized by JINX-0164 on 2026-04-07 to deliver MINIRAT via appended code in dist/index.js
All technologies in this workspace.