MAL-2025-27356 Malicious code in new-chain (npm)

The package new-chain was found to contain malicious code...

Malicious code in new-chain (npm)

The package new-chain was found to contain malicious code...

alert (>=0.0.0, <=0.0.1), audio-play (1.0.0) +13 more potentially affected by unknown CVE via new-chain (>=0.0.0, <=2.0.0)

new-chain NPM version =0.0.0, =0.0.0, =0.0.0, =1.0.1, =0.0.0, =0.0.9, =0.0.0, =3.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27356...

CVE-2022-24738

Evmos is the Ethereum Virtual Machine EVM Hub on the Cosmos Network. In versions of evmos prior to 2.0.1 attackers are able to drain unclaimed funds from user addresses. To do this an attacker must create a new chain which does not enforce signature verification and connects it to the target evmo...