Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials

Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code VS Code extension named Solidity Pro "solidity-pro" that has been observed delivering a browser wallet and credential stealer. The names of the extensions are below - helper-beeps.solidity-pro web3devtoolsx.solidity-p...

MAL-2026-13682 Malicious code in btcflx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839c411e8d33badaebd5e59b2d966dc000e631843a49ce9352caafd1b7dd9e12 Package advertises itself as an HTTP speed-up library but on import of the top-level module unconditionally locates the user's Monero wallet director...

Malicious code in btcflx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839c411e8d33badaebd5e59b2d966dc000e631843a49ce9352caafd1b7dd9e12 Package advertises itself as an HTTP speed-up library but on import of the top-level module unconditionally locates the user's Monero wallet director...

Malicious code in btcflip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4271f738e49ead6113a249ca949232cad9664db210319a097b56385b1942970 The package advertises itself as an HTTP speed-up library, but on import it archives the user's Monero wallet directory C:\Users\Documents\Monero on...

MAL-2026-13681 Malicious code in btcflip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4271f738e49ead6113a249ca949232cad9664db210319a097b56385b1942970 The package advertises itself as an HTTP speed-up library, but on import it archives the user's Monero wallet directory C:\Users\Documents\Monero on...

MAL-2026-13683 Malicious code in kotoraka (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0b7d2fa2d2e401d5ca6c2cc4bb07964a955afa5e532e3947fdcfd6395570dd6 On import, kotoraka decodes base64-obfuscated filesystem paths pointing at the user's Monero wallet directory Windows: C:\Users\Documents\Monero;...

Malicious code in kotoraka (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0b7d2fa2d2e401d5ca6c2cc4bb07964a955afa5e532e3947fdcfd6395570dd6 On import, kotoraka decodes base64-obfuscated filesystem paths pointing at the user's Monero wallet directory Windows: C:\Users\Documents\Monero;...

Malicious code in hex-encode-utils (npm)

hex-encode-utils is a purpose-built npm trojan that masquerades as a zero-dependency hex encoding/decoding utility published by the npm account devroolx under the repo github.com/stdlib-utils/hex-encode-utils. It is a multi-stage downloader/loader that runs automatically on install via a...

MAL-2026-13667 Malicious code in kotanku (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2281ff1cf735f26084f13f5f3ef5e1d5f9faf8cf06254532e5ee6d27204f52d1 During import, the package exfiltrates cryptocurrency wallet files. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in kotanku (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2281ff1cf735f26084f13f5f3ef5e1d5f9faf8cf06254532e5ee6d27204f52d1 During import, the package exfiltrates cryptocurrency wallet files. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

CVE-2021-30109

creationtimestamp| type| source ---|---|--- 2026-08-09 19:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97335 2026-08-10 00:00:08+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97335...

CVE-2021-31532

creationtimestamp| type| source ---|---|--- 2026-08-09 05:02:33+00:00| seen| Telegram/xS3Z9NpCoU2LJfvDLCd1Olb4PnPVbToMQS6j0RMReaGsm0 2026-08-10 00:00:10+00:00| seen| Telegram/xS3Z9NpCoU2LJfvDLCd1Olb4PnPVbToMQS6j0RMReaGsm0...

CVE-2026-19193

creationtimestamp| type| source ---|---|--- 2026-08-09 05:00:03+00:00| seen| https://t.me/GithubRedTeam/97247 2026-08-09 14:02:14+00:00| published-proof-of-concept| Telegram/VAAzSGKzAQvYxwRmewz7wzWwcveJmhSJJnhaglxzv2vacM 2026-08-10 00:00:09+00:00| published-proof-of-concept|...

GHSA-HHV7-P4PG-WM6P

creationtimestamp| type| source ---|---|--- 2026-08-09 04:17:03+00:00| seen| https://t.me/IntelEncyclopedia/865 2026-08-09 04:17:03+00:00| seen| https://t.me/IntelEncyclopedia/925 2026-08-10 00:00:32+00:00| published-proof-of-concept| https://t.me/IntelEncyclopedia/865 2026-08-10 00:00:33+00:00|...

CVE-2023-30000

creationtimestamp| type| source ---|---|--- 2026-08-09 01:19:36+00:00| published-proof-of-concept| Telegram/8Dh3YUE7Kfb7FvNcXIDSqcPSChtli9yVwlxO3uxT68v6BA...

CVE-2026-71557

creationtimestamp| type| source ---|---|--- 2026-08-08 03:02:14+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97106 2026-08-08 10:39:06+00:00| seen| https://gist.github.com/alon710/71d0ff9c71dc1f5ee8e40bba3da46014 2026-08-09 00:29:23+00:00| published-proof-of-concept|...

CVE-2024-24210

creationtimestamp| type| source ---|---|--- 2026-08-07 16:02:15+00:00| seen| Telegram/f4Vytjn-MRLHBVgNi9AN52s9pui8b8Txh36DWLXfR9Gx-I 2026-08-08 00:04:27+00:00| seen| Telegram/f4Vytjn-MRLHBVgNi9AN52s9pui8b8Txh36DWLXfR9Gx-I...

CVE-2026-68742

creationtimestamp| type| source ---|---|--- 2026-08-07 14:05:27+00:00| published-proof-of-concept| https://t.me/bdufstecru/3369 2026-08-08 00:06:20+00:00| published-proof-of-concept| https://t.me/bdufstecru/3369...

CVE-2026-14365

creationtimestamp| type| source ---|---|--- 2026-08-07 13:00:04+00:00| seen| Telegram/MCYJbaY7Y1JiV57VXPInnrYmoyNrGbvHNXFyTTZxyGkIzQh 2026-08-07 18:00:03+00:00| seen| Telegram/y4yfNFl35EEKw5vv-LeIXH7MMyMaGazDVpTc0HRfJalwUA 2026-08-08 00:02:15+00:00| seen|...

Malicious code in blekit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce64fb8d6264bfc9affaf6b3544637cb8559b232075b70a48144e5f1c1743020 blekit is published as a React Native BLE SDK, but its main entry re-exports a logger module consoleApp/initializeLogger/getCurrentStatus from...