MAL-2025-17629 Malicious code in cosmos-virgo-andromeda-loopback (npm)

The package cosmos-virgo-andromeda-loopback was found to contain malicious code...

MAL-2025-17628 Malicious code in cosmos-tokens-badoo-mobile (npm)

The package cosmos-tokens-badoo-mobile was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-18671 Malicious code in dotenv-safe-query-transhumanism-cosmos (npm)

The package dotenv-safe-query-transhumanism-cosmos was found to contain malicious code...

MAL-2025-37032 Malicious code in toml-private-cosmos-entanglement (npm)

The package toml-private-cosmos-entanglement was found to contain malicious code...

Malicious code in nextjs-cosmos-spinner-auth0 (npm)

The package nextjs-cosmos-spinner-auth0 was found to contain malicious code...

Malicious code in brane-oortcloud-telesto-cosmos (npm)

The package brane-oortcloud-telesto-cosmos was found to contain malicious code...

Malicious code in toml-private-cosmos-entanglement (npm)

The package toml-private-cosmos-entanglement was found to contain malicious code...

Malicious code in nconf-galaxy-repository-cosmos (npm)

The package nconf-galaxy-repository-cosmos was found to contain malicious code...

Malicious code in docusaurus-transform-achernar-cosmos (npm)

The package docusaurus-transform-achernar-cosmos was found to contain malicious code...

Malicious code in cosmos-tokens-badoo-mobile (npm)

The package cosmos-tokens-badoo-mobile was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in supercluster-sass-loader-cosmos-react-bootstrap (npm)

The package supercluster-sass-loader-cosmos-react-bootstrap was found to contain malicious code...

MAL-2025-16079 Malicious code in brane-oortcloud-telesto-cosmos (npm)

The package brane-oortcloud-telesto-cosmos was found to contain malicious code...

MAL-2025-32033 Malicious code in rehype-ora-norma-cosmos (npm)

The package rehype-ora-norma-cosmos was found to contain malicious code...

MAL-2025-18583 Malicious code in docusaurus-transform-achernar-cosmos (npm)

The package docusaurus-transform-achernar-cosmos was found to contain malicious code...

MAL-2025-18657 Malicious code in dotenv-cosmos-taurus-kinetic (npm)

The package dotenv-cosmos-taurus-kinetic was found to contain malicious code...

MAL-2025-27142 Malicious code in nconf-galaxy-repository-cosmos (npm)

The package nconf-galaxy-repository-cosmos was found to contain malicious code...

MAL-2025-27401 Malicious code in nextjs-cosmos-spinner-auth0 (npm)

The package nextjs-cosmos-spinner-auth0 was found to contain malicious code...

GO-2025-3803 Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt in github.com/cosmos/cosmos-sdk

Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt in github.com/cosmos/cosmos-sdk...

cosmwasm-std crate 输入验证错误漏洞

cosmwasm-std crate is a CosmWasm open source framework for building smart contracts in Wasm for the Cosmos SDK. An input validation error vulnerability exists in cosmwasm-std crate versions prior to 2.0.2, which stems from an integer overflow that could lead to a computation error...

Integer Overflow

github.com/cosmos/cosmos-sdk is vulnerable to Integer Overflow. The vulnerability is due to a malicious validator being able to deposit values that trigger an overflow in the Validator Rewards pool, potentially halting the blockchain...