Malicious code in @glitchpad/throttler (npm)

@glitchpad/throttler malicious version 2.2.3, published by [email protected] is a trojanized npm package belonging to the wshu.net credential-stealer campaign. The campaign published trojanized look-alike utility packages across 12+ scopes whose publisher accounts all follow the pattern...

Solana web3.js addToQueue() Unauthenticated Access

The vulnerability of the addToQueue function in the development package for the Solana blockchain platform, web3.js, is related to insufficient protection for private keys when accessing crypto wallets. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...