Malicious code in aave-v3-crosschain-listing-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc82a469f0ebdecfc878d4d0c203c13c75ab71140d7cf9f128ae1cfb8c3bc47f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2160 Malicious code in aave-v3-crosschain-listing-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc82a469f0ebdecfc878d4d0c203c13c75ab71140d7cf9f128ae1cfb8c3bc47f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Liquidatin function does not consider cases where the liquidate user does not have enough collateral to pay.

Lines of code Vulnerability details Impact Liquidatin function does not consider cases where the liquidate user does not have enough collateral to pay. Proof of Concept The problem is the paid collateral in determined by repaiddebt: I ingnored decimals for simplifcation of the formulas I'm gonna...