MAL-2025-2494 Malicious code in cbridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5753509b5d949697f65234a1cc2dfeeada8873e789415bda2717e17ccab338fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cbridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5753509b5d949697f65234a1cc2dfeeada8873e789415bda2717e17ccab338fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Incorrect implementation of the _startBridge function in CBridgeFacet

Lines of code Vulnerability details Impact The startBridge function in CBridgeFacet is to bridge the tokens to CBridge by calling the sendNative or send function on the bridge contract. However, when calling the sendNative function, no native token is sent to the bridge. The sendNative call alway...