Malicious code in hardhat-deploy-notifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb9d3b8f687f5445ef66903c25ffaee9514d721441a15b7e4c4dfbf58caa7930 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5560 Malicious code in hardhat-deploy-notifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb9d3b8f687f5445ef66903c25ffaee9514d721441a15b7e4c4dfbf58caa7930 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hardhat-configure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77548f696a5d458d665f8134760c4dea58e0b1f7b66856ddc83a4c1096c4a0f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3892 Malicious code in hardhat-configure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77548f696a5d458d665f8134760c4dea58e0b1f7b66856ddc83a4c1096c4a0f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hardhat-ethers-react-ts-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8762e2209b41b4f6eb94a4d56674ed8d23f5ecba64034e0825fe7490fea5c78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2315 Malicious code in hardhat-ethers-react-ts-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8762e2209b41b4f6eb94a4d56674ed8d23f5ecba64034e0825fe7490fea5c78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1669 Malicious code in reproduction-hardhat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ff49260182fa6026d9c786cbe4327341440dc9cea5e33c43d1687ed1effe699 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in reproduction-hardhat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ff49260182fa6026d9c786cbe4327341440dc9cea5e33c43d1687ed1effe699 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hardhat-configs (npm)

This package exfiltrates sensitive Ethereum-related data such as mnemonics and private keys to an attacker-controlled server. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98317ddb2bbad731c7576eb5f64b3a91f7e6f7bd135fa5ef05b7a2ad3da15992 Any computer that has this...

MAL-2025-626 Malicious code in hardhat-configs (npm)

This package exfiltrates sensitive Ethereum-related data such as mnemonics and private keys to an attacker-controlled server. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98317ddb2bbad731c7576eb5f64b3a91f7e6f7bd135fa5ef05b7a2ad3da15992 Any computer that has this...

Malicious code in hardhat-dotenv (npm)

The package contains code to exfiltrate environment variables to an attacker-controlled server. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3339a5b064b412e57a50444acb2bd685d7e5e7684e6d9ceaa0f1c31ff1f97454 Any computer that has this package installed or running...

MAL-2025-65 Malicious code in hardhat-dotenv (npm)

The package contains code to exfiltrate environment variables to an attacker-controlled server. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3339a5b064b412e57a50444acb2bd685d7e5e7684e6d9ceaa0f1c31ff1f97454 Any computer that has this package installed or running...

Malicious code in hardhat-deploy-others (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 85a3b67882ce27c0db4858f9509396a2a74b670426897002d8ccc9d29537c008 The OpenSSF Package Analysis project identified 'hardhat-deploy-others' @ 9.9.10 npm as malicious. It is considered malicious because: - The...

MAL-2024-11913 Malicious code in hardhat-deploy-others (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 85a3b67882ce27c0db4858f9509396a2a74b670426897002d8ccc9d29537c008 The OpenSSF Package Analysis project identified 'hardhat-deploy-others' @ 9.9.10 npm as malicious. It is considered malicious because: - The...

Malicious code in zksync-hardhat-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b8c577cf7083b6313dbfbed2524851699af41517cc400559d3f451d7846f7ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1071 Malicious code in zksync-hardhat-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b8c577cf7083b6313dbfbed2524851699af41517cc400559d3f451d7846f7ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hardhat-gas-optimizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ccb0cd4a0911c7a0eca2730092d818c34541534af8f612810d4d5cf463a397f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-958 Malicious code in hardhat-gas-optimizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ccb0cd4a0911c7a0eca2730092d818c34541534af8f612810d4d5cf463a397f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

No Chainlink error handling in case of ethereums gas prices increasing or subscription running out of Link.

Lines of code Vulnerability details Impact Any collections making use of the ChainLink VRF2 randomizer could potentially get 0x0 hashes for their nfts. Due to uint32 public callbackGasLimit = 40000; being hardcoded, any gas fluctuations on Ethereum main net, could potentially not be enough for th...

mint with sales option 3 doesn't work as expected

Lines of code Vulnerability details Summary lastMintDatecol is set to be higher than expected, which can lead to the minting process being blocked for some time. Vulnerability Details In the mint function in the MintContract if the salesOption of the collection is set to 3 then we can only mint 1...