GHSA-8986-V76Q-8VR2 @keep-network/tbtc-v2 revealing P2PKH deposit with a wrapped P2SH script

Overview P2PKH has 20 bytes just like P2SH. We protect against revealing P2PKH deposits by manually assembling the expected P2SH script in the smart contract and comparing hashes. However, we missed the case when the attacker embeds a valid P2SH inside of P2PKH as an output script. bitcoin-spv...

Malicious code in optimistic_swordtail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21adde43d7fcb3b38a2a8902ab2e7efefd5e5f99b9491a79cbfb6d93c867cc19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimistic_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3956099d3dde09c9dc38e1e9ed7643015d9ebc27370284672671666f28afcf71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-103138

Malicious code in optimisticcarpz3n npm...

EUVD-2025-103135

Malicious code in optimisticwolverinez3n npm...

MAL-2025-129269 Malicious code in optimistic_koi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c14425091869521e16f1bd31e2de3da189f8efae3c0ac6d762fdac2e0327e46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-89573

Malicious code in optimisticchipmunkz3n npm...

EUVD-2025-74399

Malicious code in optimisticshrewmagenta-83 npm...

EUVD-2025-74400

Malicious code in optimisticcephalopodemerald-83 npm...

MAL-2025-112152 Malicious code in optimistic_cephalopod_emerald-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0169e6ecd28c1f903c29cd4040fad0c900f5839bc65f5651f2769418846c826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76120

Malicious code in optimisticturtle-tool npm...

MAL-2025-106760 Malicious code in optimistic_turtle-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8308caa8444d2c1b1e847c7bd440c224e1e1b9b3f632b0dc38a8abdb941d7265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78672

Malicious code in optimisticwhalez3n npm...

EUVD-2025-78673

Malicious code in optimisticmarmotz3n npm...

Malicious code in optimistic_rabbit_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b882b85566e31a613fb36d89c00fd37e9a3b73805e0791f438974728f67f9aa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81039

Malicious code in optimisticrabbitreplicateautomation npm...

EUVD-2025-62787

Malicious code in optimisticamphibianz3n npm...

EUVD-2025-62786

Malicious code in optimisticflamingoz3n npm...

EUVD-2025-52917

Malicious code in optimistic-chocolate-cattle npm...

Malicious code in optimistic-sapphire-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf3c440a76df5fd85bae524defed8dc8bee7aae6e832e9d22d16b1f48f1a8f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...