MAL-2025-613 Malicious code in ethweb-set (npm)

This package exfiltrates cryptocurrency wallet files to an attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7af171b00090d3b3bfefae279da101b5da3a93390bc9f2cce869bdbc8685cbf Any computer that has this package installed or running should be...

Malicious code in ethweb-set (npm)

This package exfiltrates cryptocurrency wallet files to an attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7af171b00090d3b3bfefae279da101b5da3a93390bc9f2cce869bdbc8685cbf Any computer that has this package installed or running should be...

Malicious code in ether-wallet-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d172270596e32a7b2091c6879f6bf48d40efa4dba80b6a1807ebb8bf9aec0846 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-296 Malicious code in ether-wallet-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d172270596e32a7b2091c6879f6bf48d40efa4dba80b6a1807ebb8bf9aec0846 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-201 Malicious code in lib-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fe973aa7a191c3af7d728aa84fd8833989b5b4fa4cbb18ffff5595f890fa540 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lib-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fe973aa7a191c3af7d728aa84fd8833989b5b4fa4cbb18ffff5595f890fa540 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress WC Wallet plugin <= 2.2.0 - Arbitrary Content Deletion vulnerability

Arbitrary Content Deletion vulnerability discovered by Mika in WordPress Plugin WC Wallet versions = 2.2.0...

Brave Desktop 1.73.105 Security Fixes

Fixed race condition which caused a crash in Brave Wallet as reported on HackerOne by renwa. Upgraded Chromium to 131.0.6778.265 — refer to Google Chrome advisories for inherited CVEs...

Brave Android 1.73.105 Security Fixes

Fixed race condition which caused a crash in Brave Wallet as reported on HackerOne by renwa. Upgraded Chromium to 131.0.6778.265 — refer to Google Chrome advisories for inherited CVEs...

MAL-2024-12096 Malicious code in lib-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61a0b7fe2eb9c6236a827159916053db6e8ceb5fd8aec76e15eb7c2711d95d73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lib-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61a0b7fe2eb9c6236a827159916053db6e8ceb5fd8aec76e15eb7c2711d95d73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @add-wallet-exchange/set-imported-csv-message (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85e68f887715288c07927e0e74544a85fd8c7f1fd0ea7afe1ff8d50322fcaa34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @add-wallet-exchange/reset (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb76748dbba1a0501ea786fecbf98f24109ef841f992cc7a4ebda7f06d6b95b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @add-wallet-exchange/import-type (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 009dc7d5e85690b3a1fdfe88879a357c8277b755a5983e5e9bcadf1e2624af1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11934 Malicious code in @add-wallet-exchange/reset (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb76748dbba1a0501ea786fecbf98f24109ef841f992cc7a4ebda7f06d6b95b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11949 Malicious code in cdp-wallet-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06a2e526944349b6f95ab9040fbfdab31744714123a43d7b0de6b223d1f5fe84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cdp-wallet-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06a2e526944349b6f95ab9040fbfdab31744714123a43d7b0de6b223d1f5fe84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-10209

Name of the Vulnerable Software and Affected Versions Next.js versions 13.0.0 through 13.5.7 Next.js versions 14.0.0 through 14.2.20 Next.js versions 15.0.0 through 15.1.1 Description The issue is related to an unbounded resource allocation in Next.js, which can be exploited to cause a denial of...

Digital Assets Cybersecurity Essentials

Discover essential tips to secure your digital assets like crypto, NFTs, and tokens. Learn about wallet safety, avoiding…...

CVE-2024-7747

The Wallet for WooCommerce plugin for WordPress is vulnerable to incorrect conversion between numeric types in all versions up to, and including, 1.5.6. This is due to a numerical logic flaw when transferring funds to another user. This makes it possible for authenticated attackers, with...