NPM Package pkg:npm/@dydxprotocol/v4-client-js compromised

[pvdz]

Hello, friendly heads up from Socket: it looks like your package got compromised 23h ago.

New versions were published for four version-branches:

• 3.4.1
• 1.22.1
• 1.15.2
• 1.0.31

Malware confirmed. It steals all the things. Take down asap.

cc @tyleroooo , @alexey-kichin

[linear]

GH-187

[pvdz]

(Example diff: https://socket.dev/npm/package/@dydxprotocol/v4-client-js/diff/3.4.1 look for createRegistry and gensisBlock functions, see what they do...)