Merge pull request #727 from chartingshow/npm-packages-1

Block malicious npm packages targeting Ethereum developers private keys

README.md

@@ -218,7 +218,7 @@ This repo blocks specific free dns / hosting services, that are completely satur
 
 Malicious apps are a method of manipulating users into downloading malware that allows cybercriminals to steal personal information, including login credentials or payment information. It's also possible that they can even take control of a user's device. A list of package names currently blocked can be found in the folder here:
 
-- [Malicious Package Names List](https://github.com/chartingshow/crypto-firewall/blob/master/src/blacklists/package-names/apps.txt)
+- [Malicious Package Names Folder](https://github.com/chartingshow/crypto-firewall/blob/master/src/blacklists/package-names/)
 
 ## Autonomous System Number (ASN) blocking 🗃️
 

src/blacklists/blockchain-wallet-addresses/ethereum.txt

@@ -5,7 +5,7 @@
 # Contribute: https://github.com/chartingshow/crypto-firewall/issues
 # License: GPL-3.0 license
 #
-# Last modified: 27 December 2024
+# Last modified: 11 January 2025
 #
 
 0x00000009991BE6D524d7823e1D545FC5976a2fEf
@@ -49,6 +49,7 @@
 0x0C46deB26275dB82FE3564A1F18de954cD8fE918
 0x0c9bC8FF3a2625A5A7A7770C74525AF1a1Ba254a
 0x0cEe5a2F50811DF70db34C647cE536bc4891FFf6
+0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270
 0x0d6e286a7cfd25e0c01fee9756765d8033b32c71
 0x0e0bB0cC029C221277329552403c976e1BD176D2
 0x0eba461d9829c4e464a68d4857350476cfb6f559
@@ -443,6 +444,7 @@
 0xAdF7B52FB5299E6acF6E2a1cf1EAa3954B9C1Da8
 0xae0423bafe94073b4f7388191104b79b0f321853
 0xae0f538409063e66ff0e382113cb1a051fc069cd
+0xae13d989daC2f0dEbFf460aC112a837C89BAa7cd
 0xaE23d00dE342A1377759cf87FEB641AEAeB56d6F
 0xaE52f4391e29d24313C7546BbD757Fbf81ee6ac8
 0xaeee58ab46e626ea6f272b138c75ac760633b0df
@@ -479,6 +481,7 @@
 0xB9d1F28f2849DfF43a068FdA980C3Ac5eA9DB793
 0xbac8a476b95ec741e56561a66231f92bc88bb3a8
 0xbb4b5af1c32b6494b6f5b96adece4c4de1406913
+0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c
 0xBc1C67A354541c964080bA12cc4cf2aeD4086468
 0xBc565A60Ff205b275FC0812e2C1c6791e4658703
 0xbccEEBfa657ad464EBb828ff09435bAb2D3920a6
@@ -491,6 +494,7 @@
 0xBfc21dC91fbA537184a96fD82Fa2ca1E6C1Aa54f
 0xBfde637fBE78130E0C9b31c5d7E0CCB77242c519
 0xc01ea4389fd3282dc6881a0d64a27dc2869adb94
+0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2
 0xC03eD48230467ef75d8ec0f7ef20494224CEe6DC
 0xC04073a4CDF0Ac699634b1556184e1B7FA874248
 0xC045ea08AD10d23D8Bb4D7A84E9351dEe3614dFC
@@ -597,6 +601,7 @@
 0xdfBcE62700455CB27fdDCFa12345ccBe62632779
 0xdfcdb5a86b167b3a418f3909d6f7a2f2873f2969
 0xDfE273DFc4BDE9ADE0fe567089f58B5a73218059
+0xE0B7927c4aF23765Cb51314A0E0521A9645F0E2A
 0xe33067744800335f09bB03C63A7A9441E1693d86
 0xe3c9AeB5Ed38ab0A5E95E8B17FC12aE2eA82E11C
 0xE3F6584B8c138cD1e61f4515E1090Fa6f49ABE7B

src/blacklists/hosts.txt

@@ -4884,7 +4884,9 @@
 0.0.0.0 cryptopaysignal.net
 0.0.0.0 cryptoreferenc.com
 0.0.0.0 cryptosea-trade.com
+0.0.0.0 cryptoshiny.com
 0.0.0.0 cryptoskymarket.net
+0.0.0.0 cryptosnowprince.com
 0.0.0.0 cryptostockexchange.site
 0.0.0.0 cryptotabhost.online
 0.0.0.0 cryptotradeprofitsltd.com
@@ -11750,6 +11752,7 @@
 0.0.0.0 meta1trader.com
 0.0.0.0 meta4media.com
 0.0.0.0 metabaltrades.com
+0.0.0.0 metabest.tech
 0.0.0.0 metacrowd.co
 0.0.0.0 metacryptoworld.live
 0.0.0.0 metadropcoinx.com

src/blacklists/nomalware-beta.txt

@@ -4897,7 +4897,9 @@
 ||cryptopaysignal.net^$third-party
 ||cryptoreferenc.com^$third-party
 ||cryptosea-trade.com^$third-party
+||cryptoshiny.com^$third-party
 ||cryptoskymarket.net^$third-party
+||cryptosnowprince.com^$third-party
 ||cryptostockexchange.site^$third-party
 ||cryptotabhost.online^$third-party
 ||cryptotradeprofitsltd.com^$third-party
@@ -11768,6 +11770,7 @@
 ||meta1trader.com^$third-party
 ||meta4media.com^$third-party
 ||metabaltrades.com^$third-party
+||metabest.tech^$third-party
 ||metacrowd.co^$third-party
 ||metacryptoworld.live^$third-party
 ||metadropcoinx.com^$third-party

src/blacklists/nomalware-full.txt

@@ -4897,7 +4897,9 @@
 ||cryptopaysignal.net^$third-party
 ||cryptoreferenc.com^$third-party
 ||cryptosea-trade.com^$third-party
+||cryptoshiny.com^$third-party
 ||cryptoskymarket.net^$third-party
+||cryptosnowprince.com^$third-party
 ||cryptostockexchange.site^$third-party
 ||cryptotabhost.online^$third-party
 ||cryptotradeprofitsltd.com^$third-party
@@ -11768,6 +11770,7 @@
 ||meta1trader.com^$third-party
 ||meta4media.com^$third-party
 ||metabaltrades.com^$third-party
+||metabest.tech^$third-party
 ||metacrowd.co^$third-party
 ||metacryptoworld.live^$third-party
 ||metadropcoinx.com^$third-party

src/blacklists/nomalware-lite.txt

@@ -4897,7 +4897,9 @@
 ||cryptopaysignal.net^$third-party
 ||cryptoreferenc.com^$third-party
 ||cryptosea-trade.com^$third-party
+||cryptoshiny.com^$third-party
 ||cryptoskymarket.net^$third-party
+||cryptosnowprince.com^$third-party
 ||cryptostockexchange.site^$third-party
 ||cryptotabhost.online^$third-party
 ||cryptotradeprofitsltd.com^$third-party
@@ -11768,6 +11770,7 @@
 ||meta1trader.com^$third-party
 ||meta4media.com^$third-party
 ||metabaltrades.com^$third-party
+||metabest.tech^$third-party
 ||metacrowd.co^$third-party
 ||metacryptoworld.live^$third-party
 ||metadropcoinx.com^$third-party

src/blacklists/nomalware-mega.txt

@@ -4897,7 +4897,9 @@
 ||cryptopaysignal.net^$third-party
 ||cryptoreferenc.com^$third-party
 ||cryptosea-trade.com^$third-party
+||cryptoshiny.com^$third-party
 ||cryptoskymarket.net^$third-party
+||cryptosnowprince.com^$third-party
 ||cryptostockexchange.site^$third-party
 ||cryptotabhost.online^$third-party
 ||cryptotradeprofitsltd.com^$third-party
@@ -11768,6 +11770,7 @@
 ||meta1trader.com^$third-party
 ||meta4media.com^$third-party
 ||metabaltrades.com^$third-party
+||metabest.tech^$third-party
 ||metacrowd.co^$third-party
 ||metacryptoworld.live^$third-party
 ||metadropcoinx.com^$third-party

src/blacklists/package-names/apps.txt → src/blacklists/package-names/chrome-store.txt

@@ -5,7 +5,7 @@
 # Contribute: https://github.com/chartingshow/crypto-firewall/issues
 # License: GPL-3.0 license
 #
-# Last modified: 7 December 2024
+# Last modified: 11 January 2025
 #
 
 co.mona.android

src/blacklists/package-names/npm.txt

@@ -0,0 +1,26 @@
+# Crypto Firewall
+# Blocking Web Browser Crypto Malware and Phishing Websites
+#
+# Homepage: https://github.com/chartingshow/crypto-firewall
+# Contribute: https://github.com/chartingshow/crypto-firewall/issues
+# License: GPL-3.0 license
+#
+# Last modified: 11 January 2025
+#
+
+@monicfoundation/hardhat-config
+@nomicfoundations/hardhat-config
+@nomicsfoundation/hardhat-config
+@nomicsfoundation/sdk-test
+@nomicsfoundation/sdk-test1
+@nomicsfoundation/web3-sdk
+@nomisfoundation/hardhat-config
+@nomisfoundation/hardhat-configure
+crypto-nodes-validator
+hardhat-deploy-others
+hardhat-gas-optimizer
+installedpackagepublish
+node-validators
+nomicsfoundations
+solana-validator
+solidity-comments-extractors