263 matches found
Malicious code in coinbase-payment (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93e37dfb5d2372f30e0f4c01eabdbc7b1687ba0bdcc294984072fe4cf4b5bfcc The OpenSSF Package Analysis project identified 'coinbase-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
Malicious code in coinbase-parser (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1e9b3add04221c71d7c4f8d36b9c03ab651121a7e205d0e29793bd2441f46b8a The OpenSSF Package Analysis project identified 'coinbase-parser' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
MAL-2025-421 Malicious code in coinbase-parser (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1e9b3add04221c71d7c4f8d36b9c03ab651121a7e205d0e29793bd2441f46b8a The OpenSSF Package Analysis project identified 'coinbase-parser' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
Malicious code in coinbase-admin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1eca83ec9ae75b7f56bdafe8c1f050ea1997c9dfb4a97d02bbf14980917d009e The OpenSSF Package Analysis project identified 'coinbase-admin' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
MAL-2025-413 Malicious code in coinbase-admin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1eca83ec9ae75b7f56bdafe8c1f050ea1997c9dfb4a97d02bbf14980917d009e The OpenSSF Package Analysis project identified 'coinbase-admin' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
Malicious code in coinbase-api-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a25de48e1e4b5422328ce0552b7bbefcbff48c60e5210c28c0a825009ca329b9 The OpenSSF Package Analysis project identified 'coinbase-api-client' @ 999.9.9 npm as malicious. It is considered malicious because: - The...
MAL-2025-415 Malicious code in coinbase-api-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a25de48e1e4b5422328ce0552b7bbefcbff48c60e5210c28c0a825009ca329b9 The OpenSSF Package Analysis project identified 'coinbase-api-client' @ 999.9.9 npm as malicious. It is considered malicious because: - The...
Malicious code in coinbase-analytics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a2e0ebbff8d23dcfd127928b6090da6f7a5ee14f0c1bd70fc9068e133d935fc3 The OpenSSF Package Analysis project identified 'coinbase-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The packa...
MAL-2025-414 Malicious code in coinbase-analytics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a2e0ebbff8d23dcfd127928b6090da6f7a5ee14f0c1bd70fc9068e133d935fc3 The OpenSSF Package Analysis project identified 'coinbase-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The packa...
MAL-2025-419 Malicious code in coinbase-connect (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 710b36fc278e57d50e7ce86d489ae5e2da89f2ac58f80653232e0b2f7283e451 The OpenSSF Package Analysis project identified 'coinbase-connect' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
Malicious code in coinbase-connect (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 710b36fc278e57d50e7ce86d489ae5e2da89f2ac58f80653232e0b2f7283e451 The OpenSSF Package Analysis project identified 'coinbase-connect' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
Malicious code in coinbase-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa6cc534f6af737ec35618f3e9aae5325b9e3d4f5d567b4b43d0a7e25ece9015 The OpenSSF Package Analysis project identified 'coinbase-cache' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
MAL-2025-418 Malicious code in coinbase-cloud (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11f63e2582635c8aaeee457a1c87f71fdd82592004c5724a3447a0d427098c7b The OpenSSF Package Analysis project identified 'coinbase-cloud' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
MAL-2025-416 Malicious code in coinbase-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa6cc534f6af737ec35618f3e9aae5325b9e3d4f5d567b4b43d0a7e25ece9015 The OpenSSF Package Analysis project identified 'coinbase-cache' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
Malicious code in coinbase-cloud (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11f63e2582635c8aaeee457a1c87f71fdd82592004c5724a3447a0d427098c7b The OpenSSF Package Analysis project identified 'coinbase-cloud' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
Taurus multi-party-sig has OT-based ECDSA protocol implementation flaws
Coinbase researchers reported 2 security issues in our implementation of the oblivious transfer OT based protocol DKLS: 1. Secret share recovery attack If the base OT setup of the protocol is reused for another execution of the OT extension, then a malicious participant can extract a bit of the...
GHSA-7F6P-PHW2-8253 Taurus multi-party-sig has OT-based ECDSA protocol implementation flaws
Coinbase researchers reported 2 security issues in our implementation of the oblivious transfer OT based protocol DKLS: 1. Secret share recovery attack If the base OT setup of the protocol is reused for another execution of the OT extension, then a malicious participant can extract a bit of the...
Malicious code in coinbase-smart-wallet-documentation (npm)
--- -= Per source details. Do not edit below this line.=-...