29 matches found
Malicious code in wallet-crypto-utils (RubyGems)
Source: amazon-inspector 5d4c36227c90b4747bc37eb95200ddf64c2875dd153138bc496b39c1dda564f7 The gem declares a native extension ext/reqthrottlemini/extconf.rb that ships no C/C++/Rust sources; the extconf.rb only calls createmakefile'walletcryptoutilsnative' after a hostile preamble. That preamble...
Malicious code in wallet-crypto-utils (RubyGems)
RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...
MAL-2026-17615 Malicious code in wallet-crypto-utils (RubyGems)
RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...
Malicious Package
Overview csec-crypto-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in eth-crypto-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4766af8f78c9d0a3836222bd3986232b5e49086285f88d93e5c3044e3b75600 On require of index.js, the package initiates an HTTPS POST to the hardcoded endpoint https://enjbyg3xk8l.x.pipedream.net/beacon carrying a JSON...
MAL-2026-12372 Malicious code in eth-crypto-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4766af8f78c9d0a3836222bd3986232b5e49086285f88d93e5c3044e3b75600 On require of index.js, the package initiates an HTTPS POST to the hardcoded endpoint https://enjbyg3xk8l.x.pipedream.net/beacon carrying a JSON...
Malicious code in csec-crypto-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7248 Malicious code in csec-crypto-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @dany47/csec-crypto-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7063 Malicious code in @dany47/csec-crypto-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-5353 Malicious code in crypto-utils-7 (npm)
Crypto/SSH/wallet stealer, blockchain-helper-0/web3-tools-9 campaign sibling c960/c961. postinstall scripts/postinstall.js auto-execs, src/index.js harvests /.ssh/idrsa+wallet keys/seeds+env, self-labels "CRYPTO STEALER", exfils to IDENTICAL Telegram bot 8227918239 chat 6433587894 not rotated...
MAL-2025-191597 Malicious code in tensor-fi-crypto-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ed8cc30500616c36f3301bfeb5ec377ea53456fdfcbcb8fa1993346cb64958 The package tensor-fi-crypto-utils was found to contain malicious code...
EUVD-2012-3459
Malware in sbrugna...
Malware in square-crypto-utils-internal
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-5957 Malicious code in square-crypto-utils-internal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c2a693727e119b7e668536dcb77730f98ba80f9bcc2b03f5bbc80f53fea74d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
com.github.allantl:atlassian-connect-http4s_2.12 (>=0.1.0, <=0.1.2), com.github.allantl:jira4s_2.12 (0.2.0) +291 more potentially affected by CVE-2025-53864 via com.nimbusds:nimbus-jose-jwt (7.1)
com.nimbusds:nimbus-jose-jwt MAVEN version 7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.github.allantl:atlassian-connect-http4s2.12 =0.1.0, =1.4, =0.29.0, =0.29.0, =0.29.0, =0.29.0, =0.29.0...
RHEL 6 : crypto-utils (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - crypto-utils: insecure temporary file usage in genkey CVE-2012-3504 Note that Nessus has not tested for this issue...
Fedora Update for crypto-utils FEDORA-2013-3253
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for crypto-utils FEDORA-2013-3259
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
