Malicious code in nextjs-cosmos-spinner-auth0 (npm)

The package nextjs-cosmos-spinner-auth0 was found to contain malicious code...

MAL-2025-18671 Malicious code in dotenv-safe-query-transhumanism-cosmos (npm)

The package dotenv-safe-query-transhumanism-cosmos was found to contain malicious code...

Malicious code in cosmos-virgo-andromeda-loopback (npm)

The package cosmos-virgo-andromeda-loopback was found to contain malicious code...

MAL-2025-17629 Malicious code in cosmos-virgo-andromeda-loopback (npm)

The package cosmos-virgo-andromeda-loopback was found to contain malicious code...

MAL-2025-17628 Malicious code in cosmos-tokens-badoo-mobile (npm)

The package cosmos-tokens-badoo-mobile was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-17627 Malicious code in cosmos-telescope-test (npm)

The package cosmos-telescope-test was found to contain malicious code...

MAL-2025-18583 Malicious code in docusaurus-transform-achernar-cosmos (npm)

The package docusaurus-transform-achernar-cosmos was found to contain malicious code...

MAL-2025-32153 Malicious code in rest-cosmos-convict-jupiter (npm)

The package rest-cosmos-convict-jupiter was found to contain malicious code...

MAL-2025-32033 Malicious code in rehype-ora-norma-cosmos (npm)

The package rehype-ora-norma-cosmos was found to contain malicious code...

MAL-2025-37032 Malicious code in toml-private-cosmos-entanglement (npm)

The package toml-private-cosmos-entanglement was found to contain malicious code...

MAL-2025-15005 Malicious code in atlas-capella-dynamo-cosmos (npm)

The package atlas-capella-dynamo-cosmos was found to contain malicious code...

MAL-2025-26604 Malicious code in module-lacerta-cosmos-webdriver-mocha (npm)

The package module-lacerta-cosmos-webdriver-mocha was found to contain malicious code...

MAL-2025-18657 Malicious code in dotenv-cosmos-taurus-kinetic (npm)

The package dotenv-cosmos-taurus-kinetic was found to contain malicious code...

GO-2025-3803 Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt in github.com/cosmos/cosmos-sdk

Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt in github.com/cosmos/cosmos-sdk...

cosmwasm-std crate 输入验证错误漏洞

cosmwasm-std crate is a CosmWasm open source framework for building smart contracts in Wasm for the Cosmos SDK. An input validation error vulnerability exists in cosmwasm-std crate versions prior to 2.0.2, which stems from an integer overflow that could lead to a computation error...

Integer Overflow

github.com/cosmos/cosmos-sdk is vulnerable to Integer Overflow. The vulnerability is due to a malicious validator being able to deposit values that trigger an overflow in the Validator Rewards pool, potentially halting the blockchain...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via DepositValidatorRewardsPool. An attacker can cause a chain halt by introducing an overflow condition through a crafted malicious deposit into the Validator Rewards pool when full. Details Denial of...

GHSA-P22H-3M2V-CMGH Cosmos SDK's Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt

Description Name: ISA-2025-005: Integer Overflow in Cosmos SDK Component: CosmosSDK Criticality: High Considerable Impact; Likely Likelihood per ACMv1.2 Affected versions: = v0.50.13, = 0.53.2 Affected users: Validators, Full nodes, Users on chains that utilize the distribution module Cosmos SDK...

Cosmos SDK's Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt

Description Name: ISA-2025-005: Integer Overflow in Cosmos SDK Component: CosmosSDK Criticality: High Considerable Impact; Likely Likelihood per ACMv1.2 Affected versions: = v0.50.13, = 0.53.2 Affected users: Validators, Full nodes, Users on chains that utilize the distribution module Cosmos SDK...

Babylon vulnerable to chain halt when a message modifies the validator set at the epoch boundary

Summary Sending a message that modifies the validator set at the epoch boundary halts the chain. Impact Denial of Service - Comos-sdk prevents modifying the validator set from two different modules - https://github.com/cosmos/cosmos-sdk/blob/release/v0.50.x/types/module/module.goL811. Such an...