Xinbi Telegram Market Tied to $8.4B in Crypto Crime, Romance Scams, North Korea Laundering

A Chinese-language, Telegram-based marketplace called Xinbi Guarantee has facilitated no less than $8.4 billion in transactions since 2022, making it the second major black market to be exposed after HuiOne Guarantee. According to a report published by blockchain analytics firm Elliptic, merchant...

Malicious code in internallib_v921 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2d85ca5bec57f8bdf71ccddd637037d50c3a8d215c375ab6bcfba881c336175 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in managethis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c683dca54122fc6e6b92b5c4b1b65e4fdb4accc582812cd422e28002c5166946 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-hashing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5d317a1c60082e11dcf4b2d8a23616192cc326cd4fa14d1dd132b164d87fdce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mydoges (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07750d79aef67972a8effa5d86b39565615c16e1c1be3f28cefd5fc68db57a68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SONNI: Secure Oblivious Neural Network Inference

In the standard privacy-preserving Machine learning as-a-service MLaaS model, the client encrypts data using homomorphic encryption and uploads it to a server for computation. The result is then sent back to the client for decryption. It has become more and more common for the computation to be...

Malicious code in @cat-wc/utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac8c9db89562180d78f3b248882e95e33c0c24a2bc4ffdfd76b1029506f1393d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in disputeapiserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c234d2a403bb56f5512a4d647adfb222f46622a11a2689576a5f882442a4b861 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @hongfangze/array (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f960dc6274e7bc128da9e089382bd14d47a6e944b250dbc6a53b2f4a17cce5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @hongfangze/convert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58a6ee6ea5b224ab24892e45f1a473b53c5fa5cf89b93c73a62688b2790eb9c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in checkoutsellerplatserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3ee286fa5544561b468d3ac01c5f000fbd2ffc8a1da55c3c4a5c2086b8b508d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shipmentdetails-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9772823042f7d0864755c4a9eaa7cc42fedc152439eab6471b40fd5bf0b9d4e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ecko-wallet-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0abf27a0a21da3cbad3585aecbe105d054575fe79c1b9c788c93ff4b6478bcab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-utils-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c296c435648a7ea93add03c751dc85edae75eeaf8f9e36b3059aa28846dc654 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @mint-lib/notifications (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6287de558e6cd52611d12e02b9997dbbb24d52578b129047832bea6483393830 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cortex-app-tutorial (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc169aa56cb76eac4f5dab88f9b4a5d3293c0c051fd7f47b13891d7adfc43d7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.github-glitchenzo.nugetforunity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61726796c4ca9b58f4a90fb14b096634a49abd1ea591b2f740cecbc02d5cb0bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-29780

Post-Quantum Secure Feldman's Verifiable Secret Sharing provides a Python implementation of Feldman's Verifiable Secret Sharing VSS scheme. In versions 0.8.0b2 and prior, the feldmanvss library contains timing side-channel vulnerabilities in its matrix operations, specifically within the...

CVE-2025-29780

Post-Quantum Secure Feldman's Verifiable Secret Sharing provides a Python implementation of Feldman's Verifiable Secret Sharing VSS scheme. In versions 0.8.0b2 and prior, the feldmanvss library contains timing side-channel vulnerabilities in its matrix operations, specifically within the...

Malicious code in gl-emoji-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbf0085827239922ce13937a55f76a51d8017ed351ca34e30214b10670b558a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...