263 matches found
Malicious code in coinbase-desktop-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5acc3fd93737f0c91c26014273ad41b78393a11a3c9377a337636ce2ba558477 The package coinbase-desktop-sdk was found to contain malicious code...
GO-2026-4647 x402 SDK Security Advisory in github.com/coinbase/x402/go
x402 SDK Security Advisory in github.com/coinbase/x402/go. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, please suggest an edit to...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication in facilitator payment processing on Solana. An attacker can interfere with or manipulate payment transactions by exploiting a race condition. Remediation Upgrade github.com/coinbase/x402/go/mechanisms/svm to...
coinbase-agentkit (>=0.7.1, <=0.7.4), zyndai-agent (>=0.2.1, <=0.2.2) potentially affected by unknown CVE via x402 (1.0.0)
x402 PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on x402 and may be impacted: - coinbase-agentkit =0.7.1, =0.2.1, =0.2.2 Source cves: unknown CVE Source advisory: OSV:GHSA-QR2G-P6Q7-W82M...
Insider Threat: Hackers Paying Company Insiders to Bypass Security
A new report from Check Point Research reveals a growing trend of cyber criminals recruiting employees at banks, telecoms, and tech giants. Learn how hackers use the darknet and Telegram to offer payouts up to $15,000 for internal access to companies like Apple, Coinbase, and the Federal Reserve...
Malicious code in coinbase.net.api (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-191607 Malicious code in coinbase.net.api (NuGet)
--- -= Per source details. Do not edit below this line.=-...
EUVD-2012-1918
Malware in sbrugna...
EUVD-2025-5059
Malicious code in bioql PyPI...
Malware in coinbase-wallet-history-frontend
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-4234 Malicious code in python-coinbase (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in python-coinbase (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Coinbase Will Reimburse Customers Up to $400 Million After Data Breach
Plus: 12 more people are indicted over a $263 million crypto heist, and a former FBI director is accused of threatening Donald Trump thanks to an Instagram post of seashells...
Coinbase Customer Info Stolen by Bribed Overseas Agents
Coinbase insider breach: Bribed overseas agents stole user data; company rejects ransom, offers $20M reward, boosts security, and…...
Coinbase Agents Bribed, Data of ~1% Users Leaked; $20M Extortion Attempt Fails
Cryptocurrency exchange Coinbase has disclosed that unknown cyber actors broke into its systems and stole account data for a small subset of its customers. "Criminals targeted our customer support agents overseas," the company said in a statement. "They used cash offers to convince a small group ...
Coinbase Initially Targeted in GitHub Actions Supply Chain Attack; 218 Repositories' CI/CD Secrets Exposed
The supply chain attack involving the GitHub Action "tj-actions/changed-files" started as a highly-targeted attack against one of Coinbase's open-source projects, before evolving into something more widespread in scope. "The payload was focused on exploiting the public CI/CD flow of one of their...
MAL-2025-1770 Malicious code in coinbase-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in coinbase-utils (npm)
--- -= Per source details. Do not edit below this line.=-...