3909 matches found
Malicious Package
Overview bootstrap-flexgrid is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this packag...
Malicious Package
Overview tailwind-state is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package...
Malicious Package
Overview session-expire is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package...
Malicious Package
Overview session-parse is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package. On...
Malicious Package
Overview jstoauto is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package. Once...
Malicious Package
Overview chai-await-utils is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package...
Samourai Wallet Founders Jailed in $237M Crypto Laundering Case
Samourai Wallet founders Keonne Rodriguez and William Hill were sentenced to 4 and 5 years for laundering $237M via their crypto mixer...
Chrome Extension Caught Injecting Hidden Solana Transfer Fees Into Raydium Swaps
Cybersecurity researchers have discovered a new malicious extension on the Chrome Web Store that's capable of injecting a stealthy Solana transfer into a swap transaction and transferring the funds to an attacker-controlled cryptocurrency wallet. The extension, named Crypto Copilot, was first...
cggmp24 and cggmp21 are vulnerable to signature forgery through altered presignatures
Impact This attack is against presignatures used in very specific context: Presignatures + HD wallets derivation: security level reduces to 85 bits \ Previously users could generate a presignature, and then choose a HD derivation path while issuing a partial signature via...
GHSA-8FRV-Q972-9RQ5 cggmp24 and cggmp21 are vulnerable to signature forgery through altered presignatures
Impact This attack is against presignatures used in very specific context: Presignatures + HD wallets derivation: security level reduces to 85 bits \ Previously users could generate a presignature, and then choose a HD derivation path while issuing a partial signature via...
EUVD-2025-199197
Malicious code in wallet-type npm...
Malicious code in wallet-type (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53103558dbb7f0fa15aed8747785784f2e4483cb8a2dc5356bb51f88b557e42c The package wallet-type was found to contain malicious code. Source: ghsa-malware a6b9e10473762dd8f4f65c9dbd42b4fd51094b526f5d6962441f415683799c50 An...
MAL-2025-191152 Malicious code in wallet-type (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53103558dbb7f0fa15aed8747785784f2e4483cb8a2dc5356bb51f88b557e42c The package wallet-type was found to contain malicious code. Source: ghsa-malware a6b9e10473762dd8f4f65c9dbd42b4fd51094b526f5d6962441f415683799c50 An...
Malicious code in wallet-evm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78fe6d50f091dc471793f5970f9484103abc32d2f4dfbcb947438c32532eb1b9 The package wallet-evm was found to contain malicious code. Source: ghsa-malware 0e621631ca9ac01bf669a94fd6ae97b3a4426cf92564f95ccf205d5b8859acf9 Any...
EUVD-2025-199198
Malicious code in wallet-evm npm...
MAL-2025-191151 Malicious code in wallet-evm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78fe6d50f091dc471793f5970f9484103abc32d2f4dfbcb947438c32532eb1b9 The package wallet-evm was found to contain malicious code. Source: ghsa-malware 0e621631ca9ac01bf669a94fd6ae97b3a4426cf92564f95ccf205d5b8859acf9 Any...
Malicious code in victoriaxoaquyet-wallet-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c392a47bef024ed55b8fa5f13c1629cc9565b281683139ffd90449d4868386 The package victoriaxoaquyet-wallet-core was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199201
Malicious code in victoriaxoaquyet-wallet-core npm...
MAL-2025-191150 Malicious code in victoriaxoaquyet-wallet-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c392a47bef024ed55b8fa5f13c1629cc9565b281683139ffd90449d4868386 The package victoriaxoaquyet-wallet-core was found to contain malicious code. Source: ghsa-malware...