Malicious code in huma-contracts-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffcd8e55c63708841725749619d1aa01ac52fa1345eab2c6dc53f3b9f2615581 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1560 Malicious code in huma-contracts-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffcd8e55c63708841725749619d1aa01ac52fa1345eab2c6dc53f3b9f2615581 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GO-2025-3448 Malicious smart contract can crash the chain in github.com/CosmWasm/wasmvm

Malicious smart contract can crash the chain in github.com/CosmWasm/wasmvm...

CVE-2022-31172

OpenZeppelin Contracts is a library for smart contract development. Versions 4.1.0 until 4.7.1 are vulnerable to the SignatureChecker reverting. SignatureChecker.isValidSignatureNow is not expected to revert. However, an incorrect assumption about Solidity 0.8's abi.decode allows some cases to...

GHSA-23QP-3C2M-XX6W wasmvm: Malicious smart contract can crash the chain

CWA-2025-001 Severity Medium Moderate + Likely^1 Affected versions: - wasmvm = 2.2.0, = 2.1.0, = 2.0.0, 2.0.6 - wasmvm 1.5.8 Patched versions: - wasmvm 1.5.8, 2.0.6, 2.1.5, 2.2.2 Description of the bug The vulnerability can be used to crash the chain. The underlying bug that causes this is presen...

wasmvm: Malicious smart contract can slow down block production

CWA-2025-002 Severity Medium Moderate + Likely^1 Affected versions: - wasmvm = 2.2.0, = 2.1.0, = 2.0.0, 2.0.6 - wasmvm 1.5.8 Patched versions: - wasmvm 1.5.8, 2.0.6, 2.1.5, 2.2.2 Description of the bug The vulnerability can be used to slow down block production. The attack requires a malicious...

Malicious code in worldcoin-grants-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f434639d184713c5d345b9503077d108e6700344719b5e4825d684743661e01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-terminal-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c7a95bb17689730a0610fcb7b778624d3e4ca1062cf249a15afb2e5b9aa5084 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1156 Malicious code in node-terminal-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c7a95bb17689730a0610fcb7b778624d3e4ca1062cf249a15afb2e5b9aa5084 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-21607 Success of Certain Precompile Calls not Checked in Vyper

Vyper is a Pythonic Smart Contract Language for the EVM. When the Vyper Compiler uses the precompiles EcRecover 0x1 and Identity 0x4, the success flag of the call is not checked. As a consequence an attacker can provide a specific amount of gas to make these calls fail but let the overall executi...

Why Ethereum Will Be a Key Platform for Businesses in the Future

Explore how Ethereum revolutionizes industries with smart contracts, DeFi, NFTs, gaming, DAOs, and sustainability, shaping the future of…...

MAL-2024-12065 Malicious code in zap_contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 063e3a8cd4df1cbe8d271d03490b9f7dd78cbeda98767caf294735ff4cacef75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The Role of Blockchain and Smart Contracts in Securing Digital Transactions

Learn how blockchain and smart contracts improve cybersecurity factors in online transactions, remove the element of fraud, and…...

Motoko 安全漏洞

Motoko is a secure, simple, participant-based programming language open-sourced by DFINITY for building Internet Computer ICP jar smart contracts. Motoko has a security vulnerability that stems from the incremental garbage collector containing an uninitialized memory access error...

Top 5 Platforms for Identifying Smart Contract Vulnerabilities

How well do you know your smart contracts’ health? This article highlights the top five platforms that DeFi…...

Malicious code in graph-studio-billing-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afd4325b249b7dfad124c21ffe39f85d2e38f1b6c2d31361f81e821adb8365ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ICE Started Ramping Up Its Surveillance Arsenal Immediately After Donald Trump Won

US Immigration and Customs Enforcement put out a fresh call for contracts for surveillance technologies before an anticipated surge in the number of people it monitors ahead of deportation hearings...

Malware Campaign Uses Ethereum Smart Contracts to Control npm Typosquat Packages

An ongoing campaign is targeting npm developers with hundreds of typosquat versions of their legitimate counterparts in an attempt to trick them into running cross-platform malware. The attack is notable for utilizing Ethereum smart contracts for command-and-control C2 server address distribution...

The vulnerability of the Authoring component of the Oracle Service Contracts platform, a part of the Oracle E-Business Suite, allows a perpetrator to gain unauthorized access to create, modify, and delete data.

The vulnerability of the Authoring component of the Oracle Service Contracts platform, a part of the Oracle E-Business Suite, is related to deficiencies in the authorization mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to create...

CVE-2024-21280

Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite component: Authoring. Supported versions that are affected are 12.2.5-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Service Contracts...