Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature due to improper enforcement of the SIGHASH value in the signature verification process. An attacker can submit non-compliant signatures that are incorrectly accepted as valid by providing...

EUVD-2025-199150

Malicious code in @pradhumngautam/common-app npm...

EUVD-2025-199168

Malicious code in create-director-app npm...

MAL-2025-191082 Malicious code in create-director-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d71b99ae491d4f679e88d87285e36727c75273f7aa0bcacaa8f435d799bb332b The package create-director-app was found to contain malicious code. Source: ghsa-malware...

Malicious code in create-director-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d71b99ae491d4f679e88d87285e36727c75273f7aa0bcacaa8f435d799bb332b The package create-director-app was found to contain malicious code. Source: ghsa-malware...

Malicious code in create-mcp-use-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2781601c3ba0c5d6d4b78bf322d88a4d189473e68d2382c171106342acacd271 The package create-mcp-use-app was found to contain malicious code. Source: google-open-source-security...

EUVD-2025-198905

Malicious code in create-mcp-use-app npm...

MAL-2025-190922 Malicious code in create-mcp-use-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2781601c3ba0c5d6d4b78bf322d88a4d189473e68d2382c171106342acacd271 The package create-mcp-use-app was found to contain malicious code. Source: google-open-source-security...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

EUVD-2025-198706

Null pointer dereference in coapdtlsinfocallback in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a DTLS handshake where SSLgetappdata returns NULL...

EUVD-2025-198842

Malicious code in capacitor-plugin-apptrackingios npm...

EUVD-2025-198859

Malicious code in @markvivanco/app-version-checker npm...

Malicious code in @markvivanco/app-version-checker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb3390637a7e3c1122d5f1f2417189358dec13936938bd997c1bf5949c1bb8dc The package @markvivanco/app-version-checker was found to contain malicious code. Source: ghsa-malware...

Malicious code in create-hardhat3-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a1dad1ef411b38a2b87787581837e9c9f5a26fff790d14057d04ca67c06ddc The package create-hardhat3-app was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190839 Malicious code in create-hardhat3-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a1dad1ef411b38a2b87787581837e9c9f5a26fff790d14057d04ca67c06ddc The package create-hardhat3-app was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198838

Malicious code in create-hardhat3-app npm...

MAL-2025-190860 Malicious code in test-foundry-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9961bd7169c780d2201b29f4ada6a92f1c9d6eb26c8443c0365a7ea218daa7c8 The package test-foundry-app was found to contain malicious code. Source: ghsa-malware 9b0d08ebcb8c6a236f7c4c5785ac4f1ec1b4e2ede40366d6fc439473f946b3...

Malicious code in test-foundry-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9961bd7169c780d2201b29f4ada6a92f1c9d6eb26c8443c0365a7ea218daa7c8 The package test-foundry-app was found to contain malicious code. Source: ghsa-malware 9b0d08ebcb8c6a236f7c4c5785ac4f1ec1b4e2ede40366d6fc439473f946b3...