Malicious code in ejs-audit (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6005ef8f32d3d8160fb459ec4f885c273bd8721ab0becf21fe4d27accdf4d21d Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

Malicious code in price-record (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3b87630cf8eb8594e67451df7fae7627d35da7c1f67a44b1751201766dbe54a0 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-696 Malicious code in price-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6217a71efdaee9fdf44b7f4197557c52db54fdf782e0d4a5f1f81ad6eb925601 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-947 Malicious code in vue-audit (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d83b4e200320d89600b71bfb94b2106e5e01fe0c319873c9dac9b0d9661447da Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-697 Malicious code in price-record (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3b87630cf8eb8594e67451df7fae7627d35da7c1f67a44b1751201766dbe54a0 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-302 Malicious code in ejs-audit (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6005ef8f32d3d8160fb459ec4f885c273bd8721ab0becf21fe4d27accdf4d21d Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

Ransomware Hackers and Scammers Utilizing Cloud Mining to Launder Cryptocurrency

Ransomware actors and cryptocurrency scammers have joined nation-state actors in abusing cloud mining services to launder digital assets, new findings reveal. "Cryptocurrency mining is a crucial part of our industry, but it also holds special appeal to bad actors, as it provides a means to acquir...

Malicious code in chart-vxe (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 002bd97e07b258e0171a9659dd1196fa1fde9398bb98fd5ac8213b966f9e40df Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

Malicious code in audit-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d1d3fc765f4abce4b198aff5193624f464377e18c77302c696ef9e200869dcb6 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

PT-2023-33077 · Ibc-Go · Ibc-Go

Name of the Vulnerable Software and Affected Versions: ibc-go module affected versions not specified Description: The issue is related to the Inter-Blockchain Communication IBC protocol, specifically the "Huckleberry" vulnerability. Recommendations: At the moment, there is no information about a...

MAL-2023-113 Malicious code in audit-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d1d3fc765f4abce4b198aff5193624f464377e18c77302c696ef9e200869dcb6 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

Malicious code in audit-ejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cc5e978bbf3ec0126449bcb0fd362d6238bf3e8658c2e85a28fa9f68128e7227 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-172 Malicious code in chart-vxe (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 002bd97e07b258e0171a9659dd1196fa1fde9398bb98fd5ac8213b966f9e40df Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-112 Malicious code in audit-ejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cc5e978bbf3ec0126449bcb0fd362d6238bf3e8658c2e85a28fa9f68128e7227 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-948 Malicious code in vue-gws (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 557d3dde7707f6cebfde77623067da836191b95969867f4855b6706e5a027e56 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

Design/Logic Flaw

ink! is an embedded domain specific language to write smart contracts in Rust for blockchains built on the Substrate framework. Starting in version 4.0.0 and prior to version 4.2.1, the return value when using delegate call mechanics, either through CallBuilder::delegate or...

CVE-2023-34449

The CVE-2023-34449 issue affects ink! (Rust-based eDSL for Substrate). Affected versions are 4.0.0 up to, but not including, 4.2.1; the bug arises from incorrect decoding of the return value when using delegate call mechanics via CallBuilder::delegate or ink_env::invoke_contract_delegate. The roo...

MAL-2023-910 Malicious code in tslib-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ef2c27850230a6ec89e578f414b36de97f9850b32450c33921cb68699cf3ba38 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

The Rise of Blockchain Gaming and Secure Marketplaces

By Waqas Blockchain gaming and secure marketplaces are transforming the gaming industry, offering true ownership and secure trading of in-game… This is a post from HackRead.com Read the original post: The Rise of Blockchain Gaming and Secure Marketplaces...

Malicious code in elliptic-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0ffc8361769988057a4d6c1f79b5cdcf930ac38ce3f5243cd2af71837be266c1 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...