Malicious code in web3-provider-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc3ff80c31877ea658c6e65be0a05a240bf2a26f8c84e19e2dc75e88abbcd6c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4054 Malicious code in web3-provider-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc3ff80c31877ea658c6e65be0a05a240bf2a26f8c84e19e2dc75e88abbcd6c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3779 Malicious code in defi-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2a9667f769678a9fe048b57918ea5bfd54ef1323131a91f8d9e581feca74948 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in defi-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2a9667f769678a9fe048b57918ea5bfd54ef1323131a91f8d9e581feca74948 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

38,000+ FreeDrain Subdomains Found Exploiting SEO to Steal Crypto Wallet Seed Phrases

Cybersecurity researchers have exposed what they say is an "industrial-scale, global cryptocurrency phishing operation" engineered to steal digital assets from cryptocurrency wallets for several years. The campaign has been codenamed FreeDrain by threat intelligence firms SentinelOne and Validin...

Malicious code in buidl-wallet-contracts (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6b5221b4cdc1f6532fbece9f61c742fbfdd72e88d8fc1d5ed8c9dcae92157e8 Any computer that has this package installed or running should be considered...

MAL-2025-3708 Malicious code in buidl-wallet-contracts (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6b5221b4cdc1f6532fbece9f61c742fbfdd72e88d8fc1d5ed8c9dcae92157e8 Any computer that has this package installed or running should be considered...

Golden Chickens Deploy TerraStealerV2 to Steal Browser Credentials and Crypto Wallet Data

The threat actors known as Golden Chickens have been attributed to two new malware families dubbed TerraStealerV2 and TerraLogger, suggesting continued development efforts to fine-tune and diversify their arsenal. "TerraStealerV2 is designed to collect browser credentials, cryptocurrency wallet...

Privacy for Agentic AI

Sooner or later, it's going to happen. AI systems will start acting as agents, doing things on our behalf with some degree of autonomy. I think it's worth thinking about the security of that now, while its still a nascent idea. In 2019, I joined Inrupt, a company that is commercializing Tim...

Malicious code in smart-wallet-permissions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 438e7146621a62ca96ad70b6bcd6f1c28b3a10ad7649aae209b0d05def80752f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3585 Malicious code in smart-wallet-permissions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 438e7146621a62ca96ad70b6bcd6f1c28b3a10ad7649aae209b0d05def80752f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Alleged ‘Scattered Spider’ Member Extradited to U.S.

A 23-year-old Scottish man thought to be a member of the prolific Scattered Spider cybercrime group was extradited last week from Spain to the United States, where he is facing charges of wire fraud, conspiracy and identity theft. U.S. prosecutors allege Tyler Robert Buchanan and co-conspirators...

Malicious code in climate-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f1f505af92d5dfcdcfb8990f655cb13aa0ccaf3d7c00001658e3b12ca3a5080d The OpenSSF Package Analysis project identified 'climate-wallet' @ 1.2.34 npm as malicious. It is considered malicious because: - The package...

MAL-2025-3384 Malicious code in climate-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f1f505af92d5dfcdcfb8990f655cb13aa0ccaf3d7c00001658e3b12ca3a5080d The OpenSSF Package Analysis project identified 'climate-wallet' @ 1.2.34 npm as malicious. It is considered malicious because: - The package...

CVE-2025-32530

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Swings Wallet System for WooCommerce wallet-system-for-woocommerce allows Reflected XSS.This issue affects Wallet System for WooCommerce: from n/a through = 2.6.8...

CVE-2025-32530

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Swings Wallet System for WooCommerce wallet-system-for-woocommerce allows Reflected XSS.This issue affects Wallet System for WooCommerce: from n/a through = 2.6.8...

CVE-2025-32530 WordPress Wallet System for WooCommerce plugin <= 2.6.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Swings Wallet System for WooCommerce wallet-system-for-woocommerce allows Reflected XSS.This issue affects Wallet System for WooCommerce: from n/a through = 2.6.8...

CVE-2025-32530 WordPress Wallet System for WooCommerce plugin <= 2.6.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Swings Wallet System for WooCommerce allows Reflected XSS. This issue affects Wallet System for WooCommerce: from n/a through 2.6.5...

MAL-2025-3221 Malicious code in r5-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc4aaeb0366774d42ad97cf330e53bc1deac3770a8de992cd1e837ecd9190dbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in r5-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc4aaeb0366774d42ad97cf330e53bc1deac3770a8de992cd1e837ecd9190dbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...