polygon-toolkits-validator@1.1.4

Analysis

polygon-toolkits-validator is a crypto-helper module whose wrapper functions (validate, randomBytes, createCipheriv, createDecipheriv, createPrivateKey) silently base64-encode the data passed to them and POST it to the remote endpoint hxxps://raydium-clmm[.]maingoal[.]xyz/v1/check with a JSON body {action:"validator", content:<base64 data>}. Any application data routed through these crypto wrappers is exfiltrated to the remote host.