Lucene search
+L

8 matches found

Github Security Blog
Github Security Blog
•added 2026/08/06 12:31 p.m.•4 views

Malicious code in wallet-monitor-snap (npm)

Source: amazon-inspector 5c50a0acdc6be5b64538f83b0c14c3808ea3a57b963233ba32a2d80c3e4cc2c3 wallet-monitor-snap is a MetaMask Snap whose onRpcRequest handler implements a 'showSecurityAlert' method that opens a snapdialog inside MetaMask's trusted UI, tells the user their account has 'unusual...

5.9AI score
SaveExploits0References4Affected Software1
osv_mal
osv_mal
•added 2026/08/06 12:14 p.m.•36 views

MAL-2026-13393 Malicious code in wallet-monitor-snap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c50a0acdc6be5b64538f83b0c14c3808ea3a57b963233ba32a2d80c3e4cc2c3 wallet-monitor-snap is a MetaMask Snap whose onRpcRequest handler implements a 'showSecurityAlert' method that opens a snapdialog inside MetaMask's...

5.5AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/06 12:14 p.m.•82 views

Malicious code in wallet-monitor-snap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c50a0acdc6be5b64538f83b0c14c3808ea3a57b963233ba32a2d80c3e4cc2c3 wallet-monitor-snap is a MetaMask Snap whose onRpcRequest handler implements a 'showSecurityAlert' method that opens a snapdialog inside MetaMask's...

5.5AI score
SaveExploits0References2
attackerkb
attackerkb
•added 2022/06/29 3:15 p.m.•13 views

CVE-2022-32969

MetaMask before 10.11.3 might allow an attacker to access a user's secret recovery phrase because an input field is used for a BIP39 mnemonic, and Firefox and Chromium save such fields to disk in order to support the Restore Session feature, aka the Demonic issue...

5.9CVSS5.8AI score0.01822EPSS
SaveExploits0References4
Prion
Prion
•added 2022/06/29 3:15 p.m.•34 views

Design/Logic Flaw

MetaMask before 10.11.3 might allow an attacker to access a user's secret recovery phrase because an input field is used for a BIP39 mnemonic, and Firefox and Chromium save such fields to disk in order to support the Restore Session feature, aka the Demonic issue...

4.3CVSS5.7AI score0.01822EPSS
SaveExploits0References3Affected Software1
osv_cve
osv_cve
•added 2022/06/29 2:37 p.m.•31 views

CVE-2022-32969

MetaMask before 10.11.3 might allow an attacker to access a user's secret recovery phrase because an input field is used for a BIP39 mnemonic, and Firefox and Chromium save such fields to disk in order to support the Restore Session feature, aka the Demonic issue...

6.8AI score
SaveExploits0References5
Mend
Mend
•added 2022/06/29 2:37 p.m.•8 views

CVE-2022-32969

MetaMask before 10.11.3 might allow an attacker to access a user's secret recovery phrase because an input field is used for a BIP39 mnemonic, and Firefox and Chromium save such fields to disk in order to support the Restore Session feature, aka the Demonic issue...

8.2CVSS0.01822EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2022/06/29 12:00 a.m.•25 views

MetaMask security vulnerabilities

MetaMask is a crypto wallet and gateway for blockchain applications in the MetaMask community. A security vulnerability exists in versions prior to MetaMask 10.11.3, which can be exploited by an attacker to access a user's secret recovery phrase...

5.9CVSS6AI score0.01822EPSS
SaveExploits0References4
Rows per page
Query Builder