polyswarm-api (>=0.1.0, <=0.2.2), polyswarm-client (>=1.0.0rc0, <=1.0.2) +1 more potentially affected by CVE-2025-69223 via aiohttp (2.3.1)

aiohttp PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - polyswarm-api =0.1.0, =1.0.0rc0, =0.2.0a7, =0.2.0a10 Source cves: CVE-2025-69223 Source advisory: OSV:GHSA-6MQ8-RVHQ-8WGG...

CVE-2025-68183 ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr

In the Linux kernel, the following vulnerability has been resolved: ima: don't clear IMADIGSIG flag when setting or removing non-IMA xattr Currently when both IMA and EVM are in fix mode, the IMA signature will be reset to IMA hash if a program first stores IMA signature in security.ima and then...

CVE-2025-68183: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ima: don't clear IMADIGSIG flag when setting or removing non-IMA xattr Currently when both IMA and EVM are in fix mode, the IMA signature will be reset to IMA hash if a program first stores IMA signature in security.ima and then...

RUSTSEC-2025-0147 `evm-units` was removed from crates.io for malicious code

It appeared to be attempting to steal cryptocurrency...

`uniswap-utils` was removed from crates.io for malicious code

It depended on the evm-units crate, which appeared to be attempting to steal cryptocurrency...

`evm-units` was removed from crates.io for malicious code

It appeared to be attempting to steal cryptocurrency...

Malicious Rust Crate Delivers OS-Specific Malware to Web3 Developer Systems

Cybersecurity researchers have discovered a malicious Rust package that's capable of targeting Windows, macOS, and Linux systems, and features malicious functionality to stealthily execute on developer machines by masquerading as an Ethereum Virtual Machine EVM unit helper tool. The Rust crate,...

PT-2025-54748

It depended on the evm-units crate, which appeared to be attempting to steal cryptocurrency...

EUVD-2025-199198

Malicious code in wallet-evm npm...

Malicious code in wallet-evm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78fe6d50f091dc471793f5970f9484103abc32d2f4dfbcb947438c32532eb1b9 The package wallet-evm was found to contain malicious code. Source: ghsa-malware 0e621631ca9ac01bf669a94fd6ae97b3a4426cf92564f95ccf205d5b8859acf9 Any...

MAL-2025-191151 Malicious code in wallet-evm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78fe6d50f091dc471793f5970f9484103abc32d2f4dfbcb947438c32532eb1b9 The package wallet-evm was found to contain malicious code. Source: ghsa-malware 0e621631ca9ac01bf669a94fd6ae97b3a4426cf92564f95ccf205d5b8859acf9 Any...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Malicious code in gate-evm-tools-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f11f5364b5246431e888b7293099cd8833dbcdd463cc7ce7d1aeabdc066faa5a The package gate-evm-tools-test was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190844 Malicious code in gate-evm-tools-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f11f5364b5246431e888b7293099cd8833dbcdd463cc7ce7d1aeabdc066faa5a The package gate-evm-tools-test was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198832

Malicious code in gate-evm-tools-test npm...

Malicious code in gate-evm-check-code2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf4e914770e1960e3b3a816bd7fb0b1a02342cf1b4a1a3f2cad6f565c6b1f2f The package gate-evm-check-code2 was found to contain malicious code. Source: ghsa-malware...

Malware in gate-evm-check-code2

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

EUVD-2025-198833

Malicious code in gate-evm-check-code2 npm...

MAL-2025-190843 Malicious code in gate-evm-check-code2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf4e914770e1960e3b3a816bd7fb0b1a02342cf1b4a1a3f2cad6f565c6b1f2f The package gate-evm-check-code2 was found to contain malicious code. Source: ghsa-malware...