MAL-2025-718 Malicious code in wallet-adapter-demo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41c88a5f680ce3b7a91cc33acc9f9c659a8eda896547804c4745c1b7e3cb91b6 Any computer that has this package installed or running should be considered...

Malicious code in coinbase-wallet-history-frontend (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d08d31db0cc340bc756367876047e8d77f4e57cfd409444ec8a9bdf1c08a71e5 Any computer that has this package installed or running should be considered...

Malicious code in rif-wallet (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-645 Malicious code in coinbase-wallet-history-frontend (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d08d31db0cc340bc756367876047e8d77f4e57cfd409444ec8a9bdf1c08a71e5 Any computer that has this package installed or running should be considered...

MAL-2025-683 Malicious code in rif-wallet (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in wallet-history-demo-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 58e10d053f3cba02a172ebaf54943b9da709bd08e031437c58279fd60849064f The OpenSSF Package Analysis project identified 'wallet-history-demo-backend' @ 1.1.0 npm as malicious. It is considered malicious because: - Th...

MAL-2025-325 Malicious code in wallet-history-demo-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 58e10d053f3cba02a172ebaf54943b9da709bd08e031437c58279fd60849064f The OpenSSF Package Analysis project identified 'wallet-history-demo-backend' @ 1.1.0 npm as malicious. It is considered malicious because: - Th...

Malicious code in angular-blockchain-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d57e81ada5d84957a71a8517f91acfb92043935f30ce2427748fcc55b5514d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-330 Malicious code in angular-blockchain-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d57e81ada5d84957a71a8517f91acfb92043935f30ce2427748fcc55b5514d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in arcus-cmd-utils (npm)

This package executes a base64-encoded script to download an Electron-based infostealer binary, aimed at exfiltrating cryptocurrency wallets, credentials, and other sensitive data. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware...

Malicious code in ethweb-set (npm)

This package exfiltrates cryptocurrency wallet files to an attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7af171b00090d3b3bfefae279da101b5da3a93390bc9f2cce869bdbc8685cbf Any computer that has this package installed or running should be...

MAL-2025-613 Malicious code in ethweb-set (npm)

This package exfiltrates cryptocurrency wallet files to an attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7af171b00090d3b3bfefae279da101b5da3a93390bc9f2cce869bdbc8685cbf Any computer that has this package installed or running should be...

Malicious code in ether-wallet-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d172270596e32a7b2091c6879f6bf48d40efa4dba80b6a1807ebb8bf9aec0846 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-296 Malicious code in ether-wallet-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d172270596e32a7b2091c6879f6bf48d40efa4dba80b6a1807ebb8bf9aec0846 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lib-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fe973aa7a191c3af7d728aa84fd8833989b5b4fa4cbb18ffff5595f890fa540 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-201 Malicious code in lib-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fe973aa7a191c3af7d728aa84fd8833989b5b4fa4cbb18ffff5595f890fa540 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-13391: Improper Neutralization of Input During Web Page Generation

The MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Tokens Wallet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhispercontentuploadguest' shortcode in all versions up to, and including, 2.9.29 due to insufficient input...

WordPress WC Wallet plugin <= 2.2.0 - Arbitrary Content Deletion vulnerability

Arbitrary Content Deletion vulnerability discovered by Mika in WordPress Plugin WC Wallet versions = 2.2.0...

Brave Desktop 1.73.105 Security Fixes

Fixed race condition which caused a crash in Brave Wallet as reported on HackerOne by renwa. Upgraded Chromium to 131.0.6778.265 — refer to Google Chrome advisories for inherited CVEs...

Brave Android 1.73.105 Security Fixes

Fixed race condition which caused a crash in Brave Wallet as reported on HackerOne by renwa. Upgraded Chromium to 131.0.6778.265 — refer to Google Chrome advisories for inherited CVEs...