gate-evm-tools-test
MAL-2025-190844
npmmalware11/24/2025
Description
Malicious code in gate-evm-tools-test (npm)
Indicators of Compromise
SHA256 Hashes (4)
ff4f4b0be20489896990e369ba464373595724d046d2c6a6cf491b35031a29af
f11f5364b5246431e888b7293099cd8833dbcdd463cc7ce7d1aeabdc066faa5a
5ca2f5cea8d3d237646ed8c511d5710ff134fa307491842547d5c11a05c7de3e
2f8256094bf975941c01b8de23d3f7c032804eb0016b472d6a9dfd645b9c28b8
References (4)
https://github.com/advisories/GHSA-r39v-gqh6-q9mrOSVhttps://www.aikido.dev/blog/shai-hulud-strikes-again-hitting-zapier-ensdomainsOSVhttps://www.wiz.io/blog/shai-hulud-2-0-ongoing-supply-chain-attackOSVhttps://www.stepsecurity.io/blog/sha1-hulud-the-second-coming-zapier-ens-domains-and-other-prominent-npm-packages-compromisedOSV
Details
Ecosystemnpm
Attack Typemalware
Published11/24/2025
Aliases
GHSA-r39v-gqh6-q9mr
Quick Actions