168 matches found
Monero: Reentrancy attack in eth-monero atomic swap
A reentrancy vulnerability was found in the eth-xmr atomic swap smart contract, allowing an attacker to drain almost all of the ethers from the smart contract. The vulnerability was fixed in a later version of the smart contract...
Malicious Package
Overview ethers-js-snap is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...
Malicious code in ethers-4 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0eccdea200d6fdfa580033d99febead41c310ba6df3eea70c6f8594521182cab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2868 Malicious code in ethers-4 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0eccdea200d6fdfa580033d99febead41c310ba6df3eea70c6f8594521182cab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ethers-js-snap (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fed39a2c0c5817dd6ae76956a74c435c13481436cac3eb9d117857ad9be21af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2869 Malicious code in ethers-js-snap (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fed39a2c0c5817dd6ae76956a74c435c13481436cac3eb9d117857ad9be21af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
ethers-cli (>=3.0.4, <=4.0.0), ethers-meow (>=0.1.1, <=0.1.3) +4 more potentially affected by CVE-2018-19183 via ethereumjs-vm (>=2.3.1, <=2.4.0)
ethereumjs-vm NPM version =2.3.1, =3.0.4, =0.1.1, =0.0.1, =1.1.6, =1.1.41 - newstudio-lib 0.1.0 - remix-solidity 0.0.1 Source cves: CVE-2018-19183 Source advisory: GHSA-2MW7-WGGM-M6W3...
ethers-cli (>=3.0.4, <=4.0.0), ethers-meow (>=0.1.1, <=0.1.3) +4 more potentially affected by CVE-2018-19183 via ethereumjs-vm (>=2.3.1, <=2.4.0)
ethereumjs-vm NPM version =2.3.1, =3.0.4, =0.1.1, =0.0.1, =1.1.6, =1.1.41 - newstudio-lib 0.1.0 - remix-solidity 0.0.1 Source cves: CVE-2018-19183 Source advisory: OSV:GHSA-2MW7-WGGM-M6W3...