Malicious code in citra-tapai84-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af4f489c955c0043ac435ccbf80e168fdd935979cfdd4d9911edc2a0401adc30 The package citra-tapai84-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

An attacker can manipulate the preDepositvePrice to steal from other users.

Lines of code Vulnerability details Impact The first user that stakes can manipulate the total supply of sfTokens and by doing so create a rounding error for each subsequent user. In the worst case, an attacker can steal all the funds of the next user. Proof of Concept When the first user enters...