CVE-2026-63634

pympp is a Python SDK for the Machine Payments Protocol. Prior to version 0.9.1, when the server acts as the feepayer, pympp validates calldata using ethabi decoding, which is lenient about trailing bytes. The FeePayerPolicy caps gaslimit ≤ 2 M and maxfeepergas ≤ 100 Gwei but does not check...

EUVD-2026-120445

pympp is a Python SDK for the Machine Payments Protocol. Prior to version 0.9.1, when the server acts as the feepayer, pympp validates calldata using ethabi decoding, which is lenient about trailing bytes. The FeePayerPolicy caps gaslimit ≤ 2 M and maxfeepergas ≤ 100 Gwei but does not check...

CVE-2026-63634

The pympp Python SDK for the Machine Payments Protocol (prior to version 0.9.1 ) contains a vulnerability where the server, acting as a fee_payer , validates calldata using eth_abi decoding . This decoding method is lenient with trailing bytes, and while the FeePayerPolicy enforces caps on gas_li...

CVE-2026-63634: tempoxyz pympp: pympp is a Python SDK for the Machine Payments Protocol

pympp is a Python SDK for the Machine Payments Protocol. Prior to version 0.9.1, when the server acts as the feepayer, pympp validates calldata using ethabi decoding, which is lenient about trailing bytes. The FeePayerPolicy caps gaslimit ≤ 2 M and maxfeepergas ≤ 100 Gwei but does not check...

MAL-2026-14160 Malicious code in @library-dev-team/data-sanitizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec70432fa5463156a41cb4031ccdd89aa76b724eaac0c6e8e61949cb18403d02 The package's main entrypoint runs an unconditional IIFE at require time that reads .env from the current working directory and extracts values label...

Fake OpenClaw Token Giveaway Targets GitHub Devs with Wallet-Draining Scam

OX Security reveals a new phishing campaign targeting GitHub developers. Scammers use fake OpenClaw token giveaways to trick users into connecting and draining their crypto wallets...

Nodes can drain SKALE chain owners' wallets

Lines of code Vulnerability details The contest code does a good job of preventing users from withdrawing too quickly or attempting to do things without funds for gas. The nodes themselves however are not as well-secured. Impact By monitoring the values of headerMessageGasCost and messageGasCost...