Aether - Adaptive Exploit and Threat Hunting Engine for EVM-based Repositories

Aether is a Python-based framework for analyzing Solidity smart contracts, generating vulnerability findings, producing Foundry-based proof-of-concept PoC tests, and optionally validating those tests on mainnet forks. It combines static analysis, prompt-driven LLM analysis, and AI-ensemble...

Malicious VSX Extension "SleepyDuck" Uses Ethereum to Keep Its Command Server Alive

Cybersecurity researchers have flagged a new malicious extension in the Open VSX registry that harbors a remote access trojan called SleepyDuck. According to Secure Annex's John Tuckner, the extension in question, juan-bianco.solidity-vlang version 0.0.7, was first published on October 31, 2025, ...

aether

Aether - Adaptive Exploit & Threat Hunting Engine for EVM-base...

EUVD-2020-23930

Malware in sbrugna...

EUVD-2022-6227

Malicious code in bioql PyPI...

EUVD-2024-34999

Malicious code in bioql PyPI...

EUVD-2022-36126

Malicious code in bioql PyPI...

EUVD-2025-21796

Malicious code in bioql PyPI...

Malicious code in solidity-utils-docify (npm)

The package solidity-utils-docify was found to contain malicious code...

MAL-2025-42085 Malicious code in solidity-utils-docify (npm)

The package solidity-utils-docify was found to contain malicious code...

MAL-2025-27396 Malicious code in nexo-solidity-smart-contracts (npm)

The package nexo-solidity-smart-contracts was found to contain malicious code...

MAL-2025-28346 Malicious code in openzeppelin-solidity-2.3.0 (npm)

The package openzeppelin-solidity-2.3.0 was found to contain malicious code...

Malicious code in openzeppelin-solidity-2.3.0 (npm)

The package openzeppelin-solidity-2.3.0 was found to contain malicious code...

Malicious code in nexo-solidity-smart-contracts (npm)

The package nexo-solidity-smart-contracts was found to contain malicious code...

MAL-2025-6589 Malicious code in solidity-coverage (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in solidity-coverage (PyPI)

--- -= Per source details. Do not edit below this line.=-...

@oasisprotocol/sapphire-contracts (0.2.17), @openwhaleorg/pendle (>=0.1.0, <=0.1.10) +15 more potentially affected by CVE-2025-54070 via @openzeppelin/contracts-upgradeable (>=5.2.0, <=5.3.0)

@openzeppelin/contracts-upgradeable NPM version =5.2.0, =0.1.0, =0.1.0, =0.0.4, =1.0.0, =0.1.0, =0.3.0, =0.5.3, =7.9.0-maine3c28f1, =3.0.0-rc.0, =1.0.0-alpha.1, =0.3.0, =0.3.0, =0.3.2, =0.1.0, =0.3.1 and more Source cves: CVE-2025-54070 Source advisory: OSV:GHSA-9RCW-C2F9-2J55...

@1inch/delegating (2.0.0), @1inch/farming (4.0.0) +33 more potentially affected by CVE-2025-54070 via @openzeppelin/contracts (>=5.2.0, <=5.3.0)

@openzeppelin/contracts NPM version =5.2.0, =1.0.0-alpha.9, =0.1.0, =0.1.0, =0.0.4, =1.0.0, =0.1.0, =0.3.0, =0.5.3, =7.9.0-main3c5a2f8, =7.9.0-maine3c28f1, =7.9.0-main01f77d70, =7.9.0-mainc91b9b3, =8.0.9 and more Source cves: CVE-2025-54070 Source advisory: OSV:GHSA-9RCW-C2F9-2J55...

CVE-2025-53638 Solady lacks extcodesize validation on implementation in ERC4337Factory

Solady is software that provides Solidity snippets with APIs. Starting in version 0.0.125 and prior to version 0.1.24, when an account is deployed via a proxy, using regular Solidity to call its initialization function may result in a silent failure, if the initialization function does not return...

CVE-2025-53638: Improper Check for Unusual or Exceptional Conditions

Solady is software that provides Solidity snippets with APIs. Starting in version 0.0.125 and prior to version 0.1.24, when an account is deployed via a proxy, using regular Solidity to call its initialization function may result in a silent failure, if the initialization function does not return...