Malicious code in biconomy-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7692c3d9c9dbc78359b722789ba568b39a3e9b29761ba732738a992fc85c77fe Any computer that has this package install...

MAL-2025-1352 Malicious code in biconomy-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ccacc09681a6383aa261381df93b651a806293270c031081ae4af8f993652c7 Any computer that has this package install...

MAL-2025-1351 Malicious code in biconomy (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d36016f4e5e71e33918b3f098d8c1e7f6339a01117dd3a2c63c7a4ae6ee6a6ae Any computer that has this package install...

MAL-2025-1354 Malicious code in biconomy-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc0a0f2ab0beead5e42fd0146fb90778a0a15b54ffa2b9b65db7fb0612c31d5d Any computer that has this package install...

Malicious code in biconomy-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc0a0f2ab0beead5e42fd0146fb90778a0a15b54ffa2b9b65db7fb0612c31d5d Any computer that has this package install...

Malicious code in biconomy-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ccacc09681a6383aa261381df93b651a806293270c031081ae4af8f993652c7 Any computer that has this package install...

Malicious code in biconomy (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d36016f4e5e71e33918b3f098d8c1e7f6339a01117dd3a2c63c7a4ae6ee6a6ae Any computer that has this package install...

@aragon/core-contracts (>=0.7.0-alpha, <=0.8.0-alpha), @aragon/osx (>=1.2.0, <=1.3.0) +42 more potentially affected by CVE-2023-26488 via @openzeppelin/contracts-upgradeable (>=4.8.0, <=4.8.1)

@openzeppelin/contracts-upgradeable NPM version =4.8.0, =0.7.0-alpha, =1.2.0, =0.0.1, =0.0.1, =0.0.1, =1.0.4, =2.0.0, =1.0.1, =1.0.15, =1.0.27, =1.0.16, =1.0.29 and more Source cves: CVE-2023-26488 Source advisory: OSV:GHSA-878M-3G6Q-594Q...