Malicious code in jsontobinary (npm)

Source: checkmarx 31cd4cd413663a1b31485b3f8d93d643b462e9331b416f3aec9e6f0bde0aa8c2 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering tactics --- Credit: OpenSSF source...

Mitigating 51% Attacks in Blockchain Systems through Early Detection and Checkpoint-Based Defense

The 51% attack remains one of the significant security concern in Proof-of-Work PoW blockchains, where increasing hash-power concentration can create a malicious majority-control risk and enable adversarial chain reorganization. This paper proposes a two-layer defense that combines early hash-pow...

Malicious code in web3-eth-account (PyPI)

Source: kam193 bd36aeb2d45881a66bf5373c0b91a108637938dab5e0c153525e6f938c9c9503 A clone of a legitimate package with import-time malicious code activating if specific env variables are set. Once activated, it queries the blockchain to retrieve the next stage URL stored in a smart contract. The...

Malicious code in eth-account-web3 (PyPI)

Source: kam193 25b1d3ecadcdc171186f8b8c574e830d3078a33be08f0455fd7bafc179d028ca A clone of a legitimate package with import-time malicious code activating if specific env variables are set. Once activated, it queries the blockchain to retrieve the next stage URL stored in a smart contract. The...

Malicious code in eth-account-web3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b69dc345e5f7b75dbe6dccaf3dfc013a98e302176130aac064cbd8d042bae7 The distribution eth-account-web3 installs under the import name ethaccount, colliding with the legitimate ethereum/eth-account library. On import,...

MAL-2026-16127 Malicious code in eth-account-web3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b69dc345e5f7b75dbe6dccaf3dfc013a98e302176130aac064cbd8d042bae7 The distribution eth-account-web3 installs under the import name ethaccount, colliding with the legitimate ethereum/eth-account library. On import,...

MAL-2026-16129 Malicious code in web3-eth-account (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19e3eadaccc63a1e12d0e3cfe153cbf78e114f30285d4da3694990827e5f5c5a The package web3-eth-account typosquats the legitimate eth-account library and copies its metadata ApeWorX/ethereum.org author addresses, README...

Malicious code in web3-eth-account (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19e3eadaccc63a1e12d0e3cfe153cbf78e114f30285d4da3694990827e5f5c5a The package web3-eth-account typosquats the legitimate eth-account library and copies its metadata ApeWorX/ethereum.org author addresses, README...

PDoS: A Profitable Denial-Of-Service Attack against Proof-Of-Work Blockchain Liveness

The security and liveness of Proof-of-Work PoW blockchains fundamentally depend on the economic rationality of miners. Existing incentive-driven denial-of-service attacks, such as BDoS, can deter rational miners from participating, but require the attacker to continuously absorb substantial...

Function Name Is All You Need to Detect Blockchain Application Attacks

Blockchain application attacks, targeting business logic bugs in decentralized applications dApps, have been an increasing concern to their developers and users, causing significant financial loss. Existing attack detectors either rely on handcrafted rules for detection, or need difficult-to-obta...

SUSE CVE-2026-54755

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, split-royalty fields decoded in core/kapp/builtInFunctions/utils.go can contain values greater than core.HundredPercent, and core/kapp/kda/create.go and core/kapp/kda/trigger.go sum those values in uint32...

compfest-ctf-2026

COMPFEST CTF 2026 — Writeups & Solutions Solutions, exploits,...

mycoin (1.0.0), simple-blockchain-implement (>=1.0.0, <=1.0.4) potentially affected by unknown CVE via crytpo-js (0.0.1-security)

crytpo-js NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on crytpo-js and may be impacted: - mycoin 1.0.0 - simple-blockchain-implement =1.0.0, =1.0.4 Source cves: unknown CVE Source advisory: GHSA-3GPV-3FRH-FVQG...

Malicious code in tailwindcss-fluid-styles (npm)

Source: amazon-inspector 4e9b69dc0a9e6eabb685fa4be860fa456d8810c712ab300ff87023d72cf93631 src/index.js executes an evalatob... blob at top level on require. The decoded loader queries Ethereum RPC endpoints for the latest transaction from the hardcoded address...

MAL-2026-15826 Malicious code in tailwindcss-fluid-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9b69dc0a9e6eabb685fa4be860fa456d8810c712ab300ff87023d72cf93631 src/index.js executes an evalatob... blob at top level on require. The decoded loader queries Ethereum RPC endpoints for the latest transaction from...

Malicious code in tailwindcss-fluid-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9b69dc0a9e6eabb685fa4be860fa456d8810c712ab300ff87023d72cf93631 src/index.js executes an evalatob... blob at top level on require. The decoded loader queries Ethereum RPC endpoints for the latest transaction from...

Smart Contracts Claimed Vulnerable by the CVE Database, with Labels and Source Locations

The Common Vulnerabilities and Exposures CVE database catalogs vulnerability claims in hard- and software, among them those pertaining to blockchain programs a.k.a. smart contracts. We present CVE-Smart-Contracts, a curated dataset of CVE records up to July 2026 referring to Ethereum smart...

Malicious code in tailwind-minanimated (npm)

Source: amazon-inspector 78b5ade01536ccd988686907972ea2cc90b1c4abb91921604bea47ab7a53c7e2 src/index.js appends a hidden payload after 9KB of whitespace padding that decodes and runs via evalatob... whenever the package is required the README instructs users to require'tailwind-minanimated' from...

MAL-2026-15634 Malicious code in tailwind-minanimated (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b5ade01536ccd988686907972ea2cc90b1c4abb91921604bea47ab7a53c7e2 src/index.js appends a hidden payload after 9KB of whitespace padding that decodes and runs via evalatob... whenever the package is required the READ...

Malicious code in tailwind-minanimated (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b5ade01536ccd988686907972ea2cc90b1c4abb91921604bea47ab7a53c7e2 src/index.js appends a hidden payload after 9KB of whitespace padding that decodes and runs via evalatob... whenever the package is required the READ...