61 matches found
nimiq-blockchain is missing a wall-clock upper bound on block timestamps
Impact Block timestamp validation enforces that timestamp = parent.timestamp for non-skip blocks and timestamp == parent.timestamp + MINPRODUCERTIMEOUT for skip blocks, but there is no visible upper bound check against the wall clock. A malicious block-producing validator can set block timestamps...
Russian Hacker Sentenced to 2 Years for TA551 Botnet-Driven Ransomware Attacks
The U.S. Department of Justice DoJ said a Russian national has been sentenced to two years in prison for managing a botnet that was used to launch ransomware attacks against U.S. companies. Ilya Angelov, 40, of Tolyatti, Russia, was also fined $100,000. Angelov, who went by the online aliases...
Weak Enforcement and Low Compliance in PCI~DSS: A Comparative Security Study
Although credit and debit card data continue to be a prime target for attackers, organizational adherence to the Payment Card Industry Data Security Standard PCI DSS remains surprisingly low. Despite prior work showing that PCI DSS can reduce card fraud, only 32.4% of organizations were fully...
EUVD-2025-103729
Malicious code in monetarydormousez3n npm...
EUVD-2025-103730
Malicious code in monetarycaribouz3n npm...
Malicious code in monetary_caribou_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620fb7a7233c6336cd59f0e7df4de878e1f7fa088e520d05d44bbaacd13c0911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-96427
Malicious code in monetaryspoonbillz3n npm...
EUVD-2025-76250
Malicious code in monetaryanteater-smiletea npm...
EUVD-2025-76248
Malicious code in monetarystarfish-appteadev npm...
EUVD-2025-76249
Malicious code in monetarypig-toolteadev npm...
Malicious code in monetary_starfish-appteadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12edb021f52150e831101fa7e4134370565b6fb46545405b5f48b9b01af8d1e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-78776
Malicious code in monetaryantlionz3n npm...
Malicious code in monetary_antlion_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efd5447dd05695cf5224b7f5c0e39c8082c66b6714289152664a4099231a4309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-81183
Malicious code in monetarydolphinreplicateautomation npm...
Malicious code in monetary_clownfish_0xrequest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118125238c73187fb7f662a440167fb078656c5caf3d52639785e68201f0b652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-81182
Malicious code in monetaryhamsterreplicateautomation npm...
Malicious code in monetary_prawn_0xrequest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 818c178ce1dc35de898d42082f961308f82feb980678319596c75f4cfa0fbf6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-81185
Malicious code in monetaryclownfish0xrequest npm...
Malicious code in monetary_cardinal_replicate_automation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 031b6f344e11ea220055e0f44d6f8367f25d3957dc39df157a2addd54d8bce0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...