Remediation

If you are a package maintainer, there are a few ways you can check if you have been impacted, including:

• Checking your local node_modules to see if it contains the malware: grep -R 'checkethereumw'
• Checking your npm cache with this script by phxgg
• Checking your project with this script by AndrewMohawk

If you are a user, make sure you are double checking any transactions you are signing to make sure the addresses are correct. For more information, you can refer to the SEAL Framework on signing and verifying transactions.