PT-2025-6215 · Coinbase · Coinbase Wallet Sdk

Name of the Vulnerable Software and Affected Versions: Coinbase Wallet SDK versions prior to 4.3.0 Description: There is a security issue in outdated versions of the software. This issue does not directly affect users' keys, smart contracts, or funds. Recommendations: Update to version 4.3.0 or...

MAL-2025-1196 Malicious code in webhook-example-coinbase-commerce-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware caf969b51a297b05f640bf97cc7a17661d904a676086486f87b2d3241a30e431 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webhook-example-coinbase-commerce-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware caf969b51a297b05f640bf97cc7a17661d904a676086486f87b2d3241a30e431 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coinbase-wallet-history-frontend (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d08d31db0cc340bc756367876047e8d77f4e57cfd409444ec8a9bdf1c08a71e5 Any computer that has this package installed or running should be considered...

MAL-2025-645 Malicious code in coinbase-wallet-history-frontend (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d08d31db0cc340bc756367876047e8d77f4e57cfd409444ec8a9bdf1c08a71e5 Any computer that has this package installed or running should be considered...

Malicious code in coinbase-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bfca6e22bde9e7158f92c9dac3a4b739e2c3b38cb8e2a96cdd1ad74e5e48e0ac The OpenSSF Package Analysis project identified 'coinbase-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

MAL-2025-417 Malicious code in coinbase-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bfca6e22bde9e7158f92c9dac3a4b739e2c3b38cb8e2a96cdd1ad74e5e48e0ac The OpenSSF Package Analysis project identified 'coinbase-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

Malicious code in coinbase-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f4e4f2061ccb606d0bc83d4dcdce6ed72c6c42f033fa0850cdc08d5e4cb50681 The OpenSSF Package Analysis project identified 'coinbase-test' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-425 Malicious code in coinbase-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f4e4f2061ccb606d0bc83d4dcdce6ed72c6c42f033fa0850cdc08d5e4cb50681 The OpenSSF Package Analysis project identified 'coinbase-test' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in coinbase-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 10ee2dbfcb931534dd6bde1724a8a1c8a687f682a638caf4dfb5750a259402de The OpenSSF Package Analysis project identified 'coinbase-service' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-423 Malicious code in coinbase-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 10ee2dbfcb931534dd6bde1724a8a1c8a687f682a638caf4dfb5750a259402de The OpenSSF Package Analysis project identified 'coinbase-service' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-426 Malicious code in coinbase-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b0741c99359ea17cdde23087b89cf2a7443d9a2b4a7b2d274dbf78d38c71e6d9 The OpenSSF Package Analysis project identified 'coinbase-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in coinbase-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b0741c99359ea17cdde23087b89cf2a7443d9a2b4a7b2d274dbf78d38c71e6d9 The OpenSSF Package Analysis project identified 'coinbase-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in coinbase-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7826bab494bf2e5f49af8c24183a3ece8fd3df4f588a2217ded269c8dc6aee82 The OpenSSF Package Analysis project identified 'coinbase-tools' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-427 Malicious code in coinbase-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7826bab494bf2e5f49af8c24183a3ece8fd3df4f588a2217ded269c8dc6aee82 The OpenSSF Package Analysis project identified 'coinbase-tools' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in coinbase-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e6b9af30ce8eff229a63be6c3023ee9eae0d2049c07a5f214b91746c58a5865e The OpenSSF Package Analysis project identified 'coinbase-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in coinbase-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a5ca839941ed94b22736187227b12ba68ef04a39c55e4155add495e004d8ed43 The OpenSSF Package Analysis project identified 'coinbase-oauth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-424 Malicious code in coinbase-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e6b9af30ce8eff229a63be6c3023ee9eae0d2049c07a5f214b91746c58a5865e The OpenSSF Package Analysis project identified 'coinbase-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-420 Malicious code in coinbase-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a5ca839941ed94b22736187227b12ba68ef04a39c55e4155add495e004d8ed43 The OpenSSF Package Analysis project identified 'coinbase-oauth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-422 Malicious code in coinbase-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93e37dfb5d2372f30e0f4c01eabdbc7b1687ba0bdcc294984072fe4cf4b5bfcc The OpenSSF Package Analysis project identified 'coinbase-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...