67 matches found
MAL-2025-69733 Malicious code in optimistic-chocolate-limpet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eff6757308bfc4f64a421cbad9dd00a862cf2c1cd4ca29734edb33e8b5a74e5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in optimistic-sapphire-amphibian (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf3c440a76df5fd85bae524defed8dc8bee7aae6e832e9d22d16b1f48f1a8f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in optimistic-chocolate-limpet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eff6757308bfc4f64a421cbad9dd00a862cf2c1cd4ca29734edb33e8b5a74e5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-52916
Malicious code in optimistic-chocolate-limpet npm...
EUVD-2025-52915
Malicious code in optimistic-cyan-grasshopper npm...
Malicious code in optimistic-chocolate-cattle (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66f0d1d7803616898d2f31a5ae9059973894d284e4f100212296514251d5a229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-52914
Malicious code in optimistic-sapphire-amphibian npm...
EUVD-2025-52918
Malicious code in optimistic-aqua-marmot npm...
EUVD-2025-49690
Malicious code in optimistichoverflyz3n npm...
EUVD-2025-49688
Malicious code in optimisticparrotz3n npm...
Malicious code in optimistic_hoverfly_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce7f5ebe412565a34325a4a67549ea462585d8eb970c8d4e92d5e42b99c53da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
From Permissioned to Proof-of-Stake Consensus
This paper presents the first generic compiler that transforms any permissioned consensus protocol into a proof-of-stake permissionless consensus protocol. For each of the following properties, if the initial permissioned protocol satisfies that property in the partially synchronous setting, the...
Optimistic MEV in Ethereum Layer 2s: Why Blockspace Is Always in Demand
Layer 2 rollups are rapidly absorbing DeFi activity, securing over $40 billion and accounting for nearly half of Ethereum's DEX volume by Q1 2025, yet their MEV dynamics remain understudied. We address this gap by defining and quantifying optimistic MEV, a form of speculative, on-chain cyclic...
quiche -- Multiple vulnerabilities
Quiche Releases reports: This update includes 2 security fixes: Medium CVE-2025-4820: Incorrect congestion window growth by optimistic ACK. Reported by Louis Navarre on 2025-06-18. High CVE-2025-4821: Incorrect congestion window growth by invalid ACK ranges. Reported by Louis Navarre on 2025-06-1...
Looking for Attention: Randomized Attention Test Design for Validator Monitoring in Optimistic Rollups
Optimistic Rollups ORUs significantly enhance blockchain scalability but inherently suffer from the verifier's dilemma, particularly concerning validator attentiveness. Current systems lack mechanisms to proactively ensure validators are diligently monitoring L2 state transitions, creating a...
More on My AI and Democracy Book
In July, I wrote about my new book project on AI and democracy, to be published by MIT Press in fall 2025. My co-author and collaborator Nathan Sanders and I are hard at work writing. At this point, we would like feedback on titles. Here are four possibilities: 1. Rewiring the Republic: How AI Wi...
Malicious code in optimistic-cart-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0518690394723fc9bf03f60d8192f09e4133e8398d94ec7b04d2fa9ac26796be The OpenSSF Package Analysis project identified 'optimistic-cart-ui' @ 0.99.99 npm as malicious. It is considered malicious because: - The packa...
MAL-2024-50 Malicious code in optimistic-cart-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0518690394723fc9bf03f60d8192f09e4133e8398d94ec7b04d2fa9ac26796be The OpenSSF Package Analysis project identified 'optimistic-cart-ui' @ 0.99.99 npm as malicious. It is considered malicious because: - The packa...
SUSE CVE-2005-3675
The Transmission Control Protocol TCP allows remote attackers to cause a denial of service bandwidth consumption by sending ACK messages for packets that have not yet been received optimistic ACKs, which can cause the sender to increase its transmission rate until it fills available bandwidth...
