MAL-2025-1669 Malicious code in reproduction-hardhat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ff49260182fa6026d9c786cbe4327341440dc9cea5e33c43d1687ed1effe699 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in reproduction-hardhat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ff49260182fa6026d9c786cbe4327341440dc9cea5e33c43d1687ed1effe699 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hardhat-configs (npm)

This package exfiltrates sensitive Ethereum-related data such as mnemonics and private keys to an attacker-controlled server. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98317ddb2bbad731c7576eb5f64b3a91f7e6f7bd135fa5ef05b7a2ad3da15992 Any computer that has this...

MAL-2025-626 Malicious code in hardhat-configs (npm)

This package exfiltrates sensitive Ethereum-related data such as mnemonics and private keys to an attacker-controlled server. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98317ddb2bbad731c7576eb5f64b3a91f7e6f7bd135fa5ef05b7a2ad3da15992 Any computer that has this...

Malicious code in hardhat-dotenv (npm)

The package contains code to exfiltrate environment variables to an attacker-controlled server. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3339a5b064b412e57a50444acb2bd685d7e5e7684e6d9ceaa0f1c31ff1f97454 Any computer that has this package installed or running...

MAL-2025-65 Malicious code in hardhat-dotenv (npm)

The package contains code to exfiltrate environment variables to an attacker-controlled server. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3339a5b064b412e57a50444acb2bd685d7e5e7684e6d9ceaa0f1c31ff1f97454 Any computer that has this package installed or running...

Malicious code in hardhat-deploy-others (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 85a3b67882ce27c0db4858f9509396a2a74b670426897002d8ccc9d29537c008 The OpenSSF Package Analysis project identified 'hardhat-deploy-others' @ 9.9.10 npm as malicious. It is considered malicious because: - The...

MAL-2024-11913 Malicious code in hardhat-deploy-others (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 85a3b67882ce27c0db4858f9509396a2a74b670426897002d8ccc9d29537c008 The OpenSSF Package Analysis project identified 'hardhat-deploy-others' @ 9.9.10 npm as malicious. It is considered malicious because: - The...

MAL-2024-1071 Malicious code in zksync-hardhat-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b8c577cf7083b6313dbfbed2524851699af41517cc400559d3f451d7846f7ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zksync-hardhat-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b8c577cf7083b6313dbfbed2524851699af41517cc400559d3f451d7846f7ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hardhat-gas-optimizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ccb0cd4a0911c7a0eca2730092d818c34541534af8f612810d4d5cf463a397f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-958 Malicious code in hardhat-gas-optimizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ccb0cd4a0911c7a0eca2730092d818c34541534af8f612810d4d5cf463a397f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

No Chainlink error handling in case of ethereums gas prices increasing or subscription running out of Link.

Lines of code Vulnerability details Impact Any collections making use of the ChainLink VRF2 randomizer could potentially get 0x0 hashes for their nfts. Due to uint32 public callbackGasLimit = 40000; being hardcoded, any gas fluctuations on Ethereum main net, could potentially not be enough for th...

mint with sales option 3 doesn't work as expected

Lines of code Vulnerability details Summary lastMintDatecol is set to be higher than expected, which can lead to the minting process being blocked for some time. Vulnerability Details In the mint function in the MintContract if the salesOption of the collection is set to 3 then we can only mint 1...

The delegator process occurs even if the source and target have the same address.

Lines of code Vulnerability details Impact The ERC20MultiDelegate contract allows a ENS token holder to either: Case1: Transfer tokens from sources to targets to delegate votes, OR Case2: Get reimbursed from sources and burn their votes OR Case3: Deploy a proxy delegate contract to transfer token...

No check proxy contract is deployed

Lines of code Vulnerability details The deployProxyDelegatorIfNeeded function in ERC20MultiDelegate.sol does not verify that a proxy contract has been successfully deployed before emitting an event indicating its creation. Impact Both createProxyDelegatorAndTransfer and processDelegation function...

Malicious code in hardhat-contract-size (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2427df1a48ed59a242042ba5fd1d3fd1d95dff9640b59fcc3ab406f957e6c298 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8140 Malicious code in hardhat-gas-tracer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca926144035df7a8d332e6904ed879e15a43427f301b5b1849c40e2b82dfda07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8139 Malicious code in hardhat-gas-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67fe0a38eab92ae516ffa0abcd348cd662325f6e1cb7ecd957bb2918d5aa7350 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hardhat-gas-tracer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca926144035df7a8d332e6904ed879e15a43427f301b5b1849c40e2b82dfda07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...