MAL-2025-40222 Malicious code in yangkuan (npm)

The package yangkuan was found to contain malicious code...

MAL-2025-7341 Malicious code in @crabas0npm/impedit-magnam-soluta (npm)

The package @crabas0npm/impedit-magnam-soluta was found to contain malicious code...

A malicious ticket can drain the tokens

Handle pauliax Vulnerability details Impact Anyone can createPromotion with any arbitrary ticket supposed it follows the proposed interface. Thus, it is possible to create a promotion with a malicious ticket that returns arbitrary values for getAverageBalanceBetween and...