Malicious code in upilka-lukzi-iluzou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887342f458259c62a98b841ce0f63136b456a19cc7f01e4aabd0522770eef284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-dodol82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aa84d6f753707181c9e9b43751ee88b2736fd9161aac369eec30e3e20f66af0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59543 Malicious code in working_zebra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9bc011fa09f1347e5b42ed5c27f1e24bfaa0c45aa9ad5942e3bd331f6b32ea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Inflation attacks with virtual shares and assets on GeVault

Lines of code Vulnerability details Impact An inflation attacks can be done on the first deposit into the GeVault contract. Making the first real depositor losing his deposit. Proof of Concept Inflation attack steps : First, Alice the attacker need to craft a deposit that put valueX8 = 1 = Thus...