EUVD-2025-198977

Malicious code in @ensdomains/ens-test-env npm...

MAL-2025-190932 Malicious code in @ensdomains/ens-test-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3393f85554fe6141b0f72e2f23d0940b102522348e71f60d407dc1471de8f6a9 The package @ensdomains/ens-test-env was found to contain malicious code. Source: ghsa-malware...

Malicious code in @ensdomains/ens-test-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3393f85554fe6141b0f72e2f23d0940b102522348e71f60d407dc1471de8f6a9 The package @ensdomains/ens-test-env was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190930 Malicious code in @ensdomains/durin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7dcacde55c5201c366d199c830f210e3b126c9d1569c7c9a169bf40f8a3e13f The package @ensdomains/durin was found to contain malicious code. Source: ghsa-malware...

Malicious code in @ensdomains/ens-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dee805b6610ec644c5edb2b73ca1d1da2119bb3280f182e716cfdd0aa31720fb The package @ensdomains/ens-contracts was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198979

Malicious code in @ensdomains/ens-contracts npm...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

EUVD-2025-198862

Malicious code in @ensdomains/web3modal npm...

EUVD-2025-198868

Malicious code in @ensdomains/react-ens-address npm...

Malicious code in @ensdomains/subdomain-registrar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 401414959edb6c3fa49058cca521272f84ed2c1e5aef8d7cacadb50696789ba5 The package @ensdomains/subdomain-registrar was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198863

Malicious code in @ensdomains/unruggable-gateways npm...

Malicious code in @ensdomains/renewal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a66dd3b7f22e60f2047119e09a00f2034cd8c4d1844cad51f9a1c87515274c6 The package @ensdomains/renewal was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190813 Malicious code in @ensdomains/ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2ffc29e2ac9022e773e0ae8851b73c212ac070cea68b77223bdc55603f84f2 The package @ensdomains/ui was found to contain malicious code. Source: ghsa-malware 018acaca9c7db73df58ee012cf2a19602efaebc29449275c4a3cd985fa35c443...

EUVD-2025-198871

Malicious code in @ensdomains/mock npm...

Malicious code in @ensdomains/mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa69028234e7d9845b0190a845d7ed004315332e53db9625716d3e8c34f9d555 The package @ensdomains/mock was found to contain malicious code. Source: ghsa-malware e5e3d7ebf0c01ec0fcf11c5473aa2d0ae19924590bc4f27ac7e988945272d5...

EUVD-2025-198873

Malicious code in @ensdomains/dnssec-oracle-anchors npm...

EUVD-2025-198869

Malicious code in @ensdomains/offchain-resolver-contracts npm...

Malicious code in @ensdomains/name-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cfefd8b0b2d182a283e0934b365d98833a12639552eab96ebe6b69572c15c0d The package @ensdomains/name-wrapper was found to contain malicious code. Source: ghsa-malware...