Malicious code in web3-provider-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc3ff80c31877ea658c6e65be0a05a240bf2a26f8c84e19e2dc75e88abbcd6c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4054 Malicious code in web3-provider-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc3ff80c31877ea658c6e65be0a05a240bf2a26f8c84e19e2dc75e88abbcd6c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3-provider-patchers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3da847a0100e6d34ec1eaaf261644c00fcc8342f19bf86f01da33f61a7fb9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7961 Malicious code in web3-provider-patchers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3da847a0100e6d34ec1eaaf261644c00fcc8342f19bf86f01da33f61a7fb9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploring the Vulnerabilities of Seaport: A Technical Analysis of a Fake Signature Attack on Non-Fungible Tokens

Lines of code Vulnerability details Impact This finding aims to provide a comprehensive analysis of the sc4m trend, which emerged in August 2022, and has since been a prevalent issue in the WEB3 space. Despite efforts to combat this phenomenon, bad actors continue to engage in illicit activities,...

Malicious code in tokenary-web3-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f1e8a0777e06e63c14f7812c77bf6007cf1804e2e33f10d1e76b7b0ea34faf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview tokenary-web3-provider is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...