EUVD-2025-21796

Malicious code in bioql PyPI...

EUVD-2022-6683

Malicious code in bioql PyPI...

EUVD-2022-6586

Malicious code in bioql PyPI...

EUVD-2024-0247

Malicious code in bioql PyPI...

EUVD-2025-0067

Malicious code in bioql PyPI...

EUVD-2023-0269

Malicious code in bioql PyPI...

EUVD-2024-0220

Malicious code in bioql PyPI...

EUVD-2022-52750

Malicious code in bioql PyPI...

Malicious code in evm-testing (npm)

The package evm-testing was found to contain malicious code...

MAL-2025-19996 Malicious code in evm-testing (npm)

The package evm-testing was found to contain malicious code...

MAL-2025-20994 Malicious code in frost-secp256k1-evm (npm)

The package frost-secp256k1-evm was found to contain malicious code...

Malicious code in evm-cctp-contracts (npm)

The package evm-cctp-contracts was found to contain malicious code...

MAL-2025-19995 Malicious code in evm-cctp-contracts (npm)

The package evm-cctp-contracts was found to contain malicious code...

Malicious code in frost-secp256k1-evm (npm)

The package frost-secp256k1-evm was found to contain malicious code...

CVE-2025-54426

Summary: Polkadot Frontier’s Curve25519Add and Curve25519ScalarMul precompiles mis-handle invalid Ristretto point representations in versions before commit 36f70d1, silently treating malformed inputs as the Ristretto identity element and potentially yielding incorrect cryptographic results. This ...

CVE-2025-53638

Solady is software that provides Solidity snippets with APIs. Starting in version 0.0.125 and prior to version 0.1.24, when an account is deployed via a proxy, using regular Solidity to call its initialization function may result in a silent failure, if the initialization function does not return...

CVE-2025-53638

Solady is software that provides Solidity snippets with APIs. Starting in version 0.0.125 and prior to version 0.1.24, when an account is deployed via a proxy, using regular Solidity to call its initialization function may result in a silent failure, if the initialization function does not return...

CVE-2025-53638

CVE-2025-53638 (Solady) affects the Solady library for Solidity snippets. From versions 0.0.125 up to 0.1.23, deploying an account via a proxy and calling its initialization with regular Solidity may silently fail if the initialization function does not return a bool or other data. The root cause...

CVE-2025-53638 Solady lacks extcodesize validation on implementation in ERC4337Factory

Solady is software that provides Solidity snippets with APIs. Starting in version 0.0.125 and prior to version 0.1.24, when an account is deployed via a proxy, using regular Solidity to call its initialization function may result in a silent failure, if the initialization function does not return...

CVE-2025-53638 Solady lacks extcodesize validation on implementation in ERC4337Factory

Solady is software that provides Solidity snippets with APIs. Starting in version 0.0.125 and prior to version 0.1.24, when an account is deployed via a proxy, using regular Solidity to call its initialization function may result in a silent failure, if the initialization function does not return...