Malicious code in hendra-brongkos29-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa042385481064fe12824e47f2c3376c7fe99f205b5bf358b2428cc0a1652b14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Missing scaling factor in recordKeyPurchase?

Handle cmichel Vulnerability details The Unlock.recordKeyPurchase function computes the maxTokens as: maxTokens = IMintableERC20udt.balanceOfaddressthis valueInETH / 2 + 2 valueInETH / grossNetworkProduct / grossNetworkProduct; Note that grossNetworkProduct was already increased by valueInETH in...