Malicious code in eth-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f051957ac6f91e8567df873978b45c0c81a170f94decbd735d329f312ff1bb On require, index.js schedules a 37-second delayed routine that reads test/fixtures/keypairs.dat, base64-decodes it into /.cache-db/.node-sync/syncd....

GO-2026-4507 Go Ethereum affected by crash via malicious p2p message in github.com/ethereum/go-ethereum

Go Ethereum affected by crash via malicious p2p message in github.com/ethereum/go-ethereum...

GO-2026-4315 DoS via malicious p2p message affecting a vulnerable node in github.com/ethereum/go-ethereum

DoS via malicious p2p message affecting a vulnerable node in github.com/ethereum/go-ethereum...

New npm Malware Attack Infects Popular Ethereum Library with Backdoor

Security researchers at ReversingLabs have discovered a new malware campaign on the npm package repository, revealing a new…...

CVE-2023-36980

An issue in Ethereum Blockchain v0.1.1+commit.6ff4cd6 cause the balance to be zeroed out when the value of betsize+casino.balance exceeds the threshold...

CVE-2022-35936

Ethermint is an Ethereum library. In Ethermint running versions before v0.17.2, the contract selfdestruct invocation permanently removes the corresponding bytecode from the internal database storage. However, due to a bug in the DeleteAccountfunction, all contracts that used the identical bytecod...

CVE-2022-35936

CVE-2022-35936 (Ethermint) affects pre-0.17.2 Ethermint where selfdestruct can delete the bytecode entry, and due to a buggy DeleteAccount function, all contracts sharing the same CodeHash can fail after one contract self-destructs. Patch available in v0.18.0 which removes the deletion of contrac...