`evm-units` was removed from crates.io for malicious code

It appeared to be attempting to steal cryptocurrency...

Malicious Rust Crate Delivers OS-Specific Malware to Web3 Developer Systems

Cybersecurity researchers have discovered a malicious Rust package that's capable of targeting Windows, macOS, and Linux systems, and features malicious functionality to stealthily execute on developer machines by masquerading as an Ethereum Virtual Machine EVM unit helper tool. The Rust crate,...

Malicious code in wallet-evm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78fe6d50f091dc471793f5970f9484103abc32d2f4dfbcb947438c32532eb1b9 The package wallet-evm was found to contain malicious code. Source: ghsa-malware 0e621631ca9ac01bf669a94fd6ae97b3a4426cf92564f95ccf205d5b8859acf9 Any...

EUVD-2025-199198

Malicious code in wallet-evm npm...

MAL-2025-191151 Malicious code in wallet-evm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78fe6d50f091dc471793f5970f9484103abc32d2f4dfbcb947438c32532eb1b9 The package wallet-evm was found to contain malicious code. Source: ghsa-malware 0e621631ca9ac01bf669a94fd6ae97b3a4426cf92564f95ccf205d5b8859acf9 Any...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Malicious code in gate-evm-tools-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f11f5364b5246431e888b7293099cd8833dbcdd463cc7ce7d1aeabdc066faa5a The package gate-evm-tools-test was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190844 Malicious code in gate-evm-tools-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f11f5364b5246431e888b7293099cd8833dbcdd463cc7ce7d1aeabdc066faa5a The package gate-evm-tools-test was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198832

Malicious code in gate-evm-tools-test npm...

Malicious code in gate-evm-check-code2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf4e914770e1960e3b3a816bd7fb0b1a02342cf1b4a1a3f2cad6f565c6b1f2f The package gate-evm-check-code2 was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198833

Malicious code in gate-evm-check-code2 npm...

MAL-2025-190843 Malicious code in gate-evm-check-code2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf4e914770e1960e3b3a816bd7fb0b1a02342cf1b4a1a3f2cad6f565c6b1f2f The package gate-evm-check-code2 was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198836

Malicious code in evm-checkcode-cli npm...

MAL-2025-190841 Malicious code in evm-checkcode-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67c49d35b6096e7c647d830c11a75a90f1bd3b90677f1c72d1bdefcd87b134e8 The package evm-checkcode-cli was found to contain malicious code. Source: ghsa-malware...

Malicious code in evm-checkcode-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67c49d35b6096e7c647d830c11a75a90f1bd3b90677f1c72d1bdefcd87b134e8 The package evm-checkcode-cli was found to contain malicious code. Source: ghsa-malware...

kernel: ima: Fix a potential integer overflow in ima_appraise_measurement

In the Linux kernel, the following vulnerability has been resolved: ima: Fix a potential integer overflow in imaappraisemeasurement When the ima-modsig is enabled, the rc passed to evmverifyxattr may be negative, which may cause the integer overflow problem...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988823)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988823 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: davinci: da850-evm: Avoid NULL pointer dereference With newer versions of GCC, there is a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988879)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988879 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: ti: j721e-evm: Fix refcount leak in j721esocprobe ofparsephandle returns a node pointer wit...

Aether - Adaptive Exploit and Threat Hunting Engine for EVM-based Repositories

Aether is a Python-based framework for analyzing Solidity smart contracts, generating vulnerability findings, producing Foundry-based proof-of-concept PoC tests, and optionally validating those tests on mainnet forks. It combines static analysis, prompt-driven LLM analysis, and AI-ensemble...