GitVenom Malware Steals $456K in Bitcoin Using Fake GitHub Projects to Hijack Wallets

Cybersecurity researchers are calling attention to an ongoing campaign that's targeting gamers and cryptocurrency investors under the guise of open-source projects hosted on GitHub. The campaign, which spans hundreds of repositories, has been dubbed GitVenom by Kaspersky. "The infected projects...

Bybit Confirms Record-Breaking $1.5 Billion Crypto Heist in Sophisticated Cold Wallet Attack

Cryptocurrency exchange Bybit on Friday revealed that a "sophisticated" attack led to the theft of over $1.5 billion worth of cryptocurrency from one of its Ethereum cold offline wallets, making it the largest ever single crypto heist in history. "The incident occurred when our ETH multisig cold...

Lazarus Group Deploys Marstech1 JavaScript Implant in Targeted Developer Attacks

The North Korean threat actor known as the Lazarus Group has been linked to a previously undocumented JavaScript implant named Marstech1 as part of limited targeted attacks against developers. The active operation has been dubbed Marstech Mayhem by SecurityScorecard, with the malware delivered by...

84447xe5t8 (1.0.0), @0xsquid/deposit-widget (>=0.0.2-beta.0, <=0.2.0) +255 more potentially affected by unknown CVE via @coinbase/wallet-sdk (>=4.0.0, <=4.2.4)

@coinbase/wallet-sdk NPM version =4.0.0, =0.0.2-beta.0, =2.1.11-beta.0, =3.0.0-beta.16, =0.0.1, =0.2.1, =5.50.0, =1.0.77-4.0, =0.0.1, =1.0.0-beta.1, =0.0.1, =0.0.1, =0.0.73-rc and more Source cves: unknown CVE Source advisory: OSV:GHSA-8RGJ-285W-QCQ4...

Unknown vulnerability in Coinbase Wallet SDK

Impact There is a security vulnerability in outdated versions of Coinbase Wallet SDK. This does not directly affect users' keys, smart contracts, or funds. Patches Please update to version = 4.3.0...

GHSA-8RGJ-285W-QCQ4 Unknown vulnerability in Coinbase Wallet SDK

Impact There is a security vulnerability in outdated versions of Coinbase Wallet SDK. This does not directly affect users' keys, smart contracts, or funds. Patches Please update to version = 4.3.0...

PT-2025-6215 · Coinbase · Coinbase Wallet Sdk

Name of the Vulnerable Software and Affected Versions: Coinbase Wallet SDK versions prior to 4.3.0 Description: There is a security issue in outdated versions of the software. This issue does not directly affect users' keys, smart contracts, or funds. Recommendations: Update to version 4.3.0 or...

SparkCat Malware Uses OCR to Extract Crypto Wallet Recovery Phrases from Images

A new malware campaign dubbed SparkCat has leveraged a suit of bogus apps on both Apple's and Google's respective app stores to steal victims' mnemonic phrases associated with cryptocurrency wallets. The attacks leverage an optical character recognition OCR model to exfiltrate select images...

CVE-2024-38699

Missing Authorization vulnerability in WP Swings Wallet System for WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Wallet System for WooCommerce: from n/a through 2.5.13...

Take my money: OCR crypto stealers in Google Play and App Store

Update 07.02.2025: Google removed malicious apps from Google Play. Update 06.02.2025: Apple removed malicious apps from the App Store. In March 2023, researchers at ESET discovered malware implants embedded into various messaging app mods. Some of these scanned users' image galleries in search of...

CVE-2024-6353

The Wallet for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'searchvalue' parameter in all versions up to, and including, 1.5.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possib...

Malicious code in hosted-wallet-page (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ede0235fd9b473e8e196c7b36ea76c1a910d85843bf453363798303f16b05625 Any computer that has this package installed or running should be considered...

MAL-2025-1219 Malicious code in hosted-wallet-page (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ede0235fd9b473e8e196c7b36ea76c1a910d85843bf453363798303f16b05625 Any computer that has this package installed or running should be considered...

CVE-2025-23527

Missing Authorization vulnerability in hemnathmouli WC Wallet wc-wallet allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WC Wallet: from n/a through = 2.2.0...

CVE-2025-23527

CVE-2025-23527 corresponds to WC Wallet: Missing Authorization vulnerability. Red Hat/NVD entries describe a Missing Authorization issue that allows accessing functionality not properly constrained by ACLs, affecting WC Wallet versions up to 2.2.0. Vuln enrichment explicitly labels this as an Arb...

MAL-2025-1177 Malicious code in sol-wallet-adapter-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b73b8c9916aaa68a346fd8bc05ae98f04028ce384654c5ece31bbf68657a7be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-4921 · Wc Wallet · Wc Wallet

Name of the Vulnerable Software and Affected Versions: WC Wallet versions n/a through 2.2.0 Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by Access Control Lists ACLs. ACLs are used to define permissions f...

WordPress plugin WC Wallet 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2025-23527: Missing Authorization

Missing Authorization vulnerability in hemnathmouli WC Wallet wc-wallet allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WC Wallet: from n/a through = 2.2.0...

Malicious code in wallet-adapter-demo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41c88a5f680ce3b7a91cc33acc9f9c659a8eda896547804c4745c1b7e3cb91b6 Any computer that has this package installed or running should be considered...