CVE-2026-107420

Unauthenticated Bypass Vulnerability in Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway = 1.7.2 versions...

CVE-2026-107420 WordPress Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway plugin <= 1.7.2 - Bypass Vulnerability vulnerability

Unauthenticated Bypass Vulnerability in Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway = 1.7.2 versions...

EUVD-2026-96422

Unauthenticated Bypass Vulnerability in Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway = 1.7.2 versions...

CVE-2026-107420

The Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway plugin for WordPress versions

PT-2026-109745

Unauthenticated Bypass Vulnerability in Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway = 1.7.2 versions...

WordPress Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway plugin <= 1.7.2 - Bypass Vulnerability vulnerability

Bypass Vulnerability vulnerability discovered by luffy in WordPress Plugin Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway versions = 1.7.2...

MetaMask Security Incident Prompts Exit of Affected Ethereum Validators

MetaMask on Thursday said it's responding to what it described as an "ongoing security incident" impacting part of its infrastructure. "We are actively addressing and remediating the issue internally, in coordination with external partners and security advisors," the software cryptocurrency walle...

PT-2026-103872

@coopernicus01 MetaMask says wallets are fine. It was MetaMask's staking infra validators it runs for Lido, now being exited as a precaution. No action needed for wallet users or stETH holders. Live phish: fake "Consensys" Medium post says re-import your seed CVE-2026-99745. No such CVE...

Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials

Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code VS Code extension named Solidity Pro "solidity-pro" that has been observed delivering a browser wallet and credential stealer. The names of the extensions are below - helper-beeps.solidity-pro web3devtoolsx.solidity-p...

Malicious code in wallet-monitor-snap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c50a0acdc6be5b64538f83b0c14c3808ea3a57b963233ba32a2d80c3e4cc2c3 wallet-monitor-snap is a MetaMask Snap whose onRpcRequest handler implements a 'showSecurityAlert' method that opens a snapdialog inside MetaMask's...

MAL-2026-13393 Malicious code in wallet-monitor-snap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c50a0acdc6be5b64538f83b0c14c3808ea3a57b963233ba32a2d80c3e4cc2c3 wallet-monitor-snap is a MetaMask Snap whose onRpcRequest handler implements a 'showSecurityAlert' method that opens a snapdialog inside MetaMask's...

Malicious code in gekko-trading-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8efc19985c853a3f4fdc8bdb1f08b432456b8f55ce701567edbf593fb3e6211c The package's postinstall hook runs setup.js, which unconditionally downloads core.exe from the hardcoded Cloudflare Workers subdomain...

MAL-2026-12388 Malicious code in gekko-trading-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8efc19985c853a3f4fdc8bdb1f08b432456b8f55ce701567edbf593fb3e6211c The package's postinstall hook runs setup.js, which unconditionally downloads core.exe from the hardcoded Cloudflare Workers subdomain...

MAL-2026-12387 Malicious code in gekko-mev-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86b8b89beb9e8245f1a13fbaf7fc18719f0b87c12bba7e7dcaf3321e7127020e The package presents itself as an Ethereum MEV bot, but bin/gekko-bot.js silently spawns lib/stealth.js as a detached, stdio-ignored background child...

Malicious code in @wethenorth12/web3-provider-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f54c89c6e669f4a9e1e2939e09b5ac809507f98df451e239add607d417f394a Package name mimics MetaMask's official web3-provider-engine and its README advertises a drop-in replacement, but the exported API...

MAL-2026-12106 Malicious code in @wethenorth12/web3-provider-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f54c89c6e669f4a9e1e2939e09b5ac809507f98df451e239add607d417f394a Package name mimics MetaMask's official web3-provider-engine and its README advertises a drop-in replacement, but the exported API...

MAL-2026-11994 Malicious code in @zzzgenesis00/web3-provider-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae571005ccdcdc23e50fbee1eddc31d39355706b7945df3ccbb3096ecaf724b Package impersonates MetaMask's web3-provider-engine author field 'MetaMask', homepage pointing to github.com/MetaMask/web3-provider-engine while...

Malicious code in @zzzgenesis00/web3-provider-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae571005ccdcdc23e50fbee1eddc31d39355706b7945df3ccbb3096ecaf724b Package impersonates MetaMask's web3-provider-engine author field 'MetaMask', homepage pointing to github.com/MetaMask/web3-provider-engine while...

Malicious Package

Overview @wagnibot/metamask is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @wagnibot/metemask-sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...