EUVD-2025-199274

Malicious code in quickswap-default-token-list npm...

@getsafle/1inch-controller (>=1.1.1 <=1.2.2), @getsafle/pancakeswap-controller (>=1.0.0 <=1.0.1) +4 more potentially affected by unknown CVE via quickswap-default-token-list (=1.5.15)

quickswap-default-token-list NPM version =1.5.15 is affected by a known vulnerability. The following packages have a transitive dependency on quickswap-default-token-list and may be impacted: - @getsafle/1inch-controller =1.1.1, =1.0.0, =1.0.0, =1.0.1, =1.0.1, =1.1.1, =1.1.4 Source cves: unknown...

Malicious code in kinetix-default-token-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 834c5a1d0acc5be073a1939708bfdfdb3d38a411407c9ac4e2abebdfd44ee059 The package kinetix-default-token-list was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199131

Malicious code in kinetix-default-token-list npm...

MAL-2025-191117 Malicious code in kinetix-default-token-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 834c5a1d0acc5be073a1939708bfdfdb3d38a411407c9ac4e2abebdfd44ee059 The package kinetix-default-token-list was found to contain malicious code. Source: ghsa-malware...