Talking Transactions: Decentralized Communication through Ethereum Input Data Messages (IDMs)

Can you imagine, blockchain transactions can talk! In this paper, we study how they talk and what they talk about. We focus on the input data field of Ethereum transactions, which is designed to allow external callers to interact with smart contracts. In practice, this field also enables users to...

MAL-2025-4584 Malicious code in arc-offsec-custom-library2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a8fa793672d2e0686853c58a6768867a936971cb91561c3a1cbcebda67c22121 The OpenSSF Package Analysis project identified 'arc-offsec-custom-library2' @ 1.0.9 npm as malicious. It is considered malicious because: - The...

New Malware Spotted Corrupts Its Own Headers to Block Analysis

Fortinet spots new malware that corrupts its own headers to block forensic analysis, hide behavior, and communicate with its C2 server...

libvpx: Double-free in libvpx encoder

A flaw was found in libvpx. A double-free issue can occur in vpxcodecencinitmulti after a failed allocation when initializing the encoder for WebRTC. This can cause memory corruption and an exploitable crash...

A Tertiary Review on Quantum Cryptography

Quantum computers impose an immense threat to system security. As a countermeasure, new cryptographic classes have been created to prevent these attacks. Technologies such as post-quantum cryptography and quantum cryptography. Quantum cryptography uses the principle of quantum physics to produce...

Falco 0.41.0

Sysdig Falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities involving file and network activity, process execution, IPC, and much more, using a flexible syntax. Falco...

MAL-2025-4536 Malicious code in xsolla-pay2play-widget (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48525bae2b7d23a83f3e96e77031380673cc831294a477623f29b8b82b9a8fa9 Any computer that has this package installed or running should be considered...

MAL-2025-4553 Malicious code in csp-bypass-poc (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in halodoc (npm)

The package communicates with a domain associated with malicious activity...

Fortinet FortiClientMAC 安全漏洞

Fortinet FortiClientMAC is a U.S. fly tower Fortinet company based on macOS platform security tools. Fortinet FortiClientMAC suffers from an authorization issue vulnerability that stems from improper authorization and can be exploited by an attacker to cause elevation of privilege via a specially...

Malicious code in arc-offsec-custom-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acb3bbd394d6b00a6c9c608c0692c0c3748162b099b5eab871667f3bca061a2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-5262

A double-free could have occurred in vpxcodecencinitmulti after a failed allocation when initializing the encoder for WebRTC. This could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 139 and Thunderbird 128.11...

Malicious code in mirror-logger-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92a6abc2d944966bb6b2706869d9fd329de99a9fbf60b2f594ba60b61dd3cf30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in syf-api (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a36b5dfd63736b61215e259a345ecf4691a6553267af52ff5485d1e5a8889c81 Any computer that has this package installed or running should be considered...

MAL-2025-4480 Malicious code in ideals-models (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9094b69aeede7f54491271e3aa85e2daed3a13e32c5bea91b73721225061b2d1 Any computer that has this package installed or running should be considered...

Malicious code in cspotcode (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2130be6b5e619ba165a6aece5d32fbf21121d999dea65d83d80d4464db4b1ce Any computer that has this package installed or running should be considered...

CVE-2025-5163

The CVE-2025-5163 entry concerns yangshare warehouseManager (版本 1.0). The vulnerability is an improper access controls flaw introduced by a manipulation of the affected component, with remote initiation possible. Exploitation details are publicly disclosed, and the vendor is reportedly unresponsi...

MAL-2025-4423 Malicious code in tml-sso (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 847dbce1211be416799a06c22cc32901e282fd07fbb9d9b118b8763d7aa24b09 The OpenSSF Package Analysis project identified 'tml-sso' @ 10000.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in hpglobaldata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 459cca0394666da81c2e6b2f659b91902693b72fd5e18fc6ca3e08347197e941 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dbtw/mfe-gateway (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fafde4d408da1ab81fb068824fa886f677ddb1b507e9f1040b740152f58adb3 Any computer that has this package installed or running should be considered...