3 matches found
MAL-2024-10627 Malicious code in web3-helpers.js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b4f43eb01c69ebcb1293d0134dc7fa64f02d938354439483848597057842229 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10621 Malicious code in pumpfun-bundle-helpers.js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd7c786bea01625419ab36f62b4214b13533254d53003e65c365db3a1e3d2e82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Prototype Pollution
baobab is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes via the merger function in helpers.js and modify attributes such as proto, constructor, and other prototype base objects...