MAL-2024-4370 Malicious code in Blоckсоre.Features.Wallеt (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Blоckсоre.Features.Wallеt (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wallet-connect-live-app (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3852 Malicious code in wallet-connect-live-app (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1824 Malicious code in @bitkub-moonshot/bitkubx-wallet (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @bitkub-moonshot/bitkubx-wallet (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-34694

LNbits is a Lightning wallet and accounts system. Paying invoices in Eclair that do not get settled within the internal timeout about 30s lead to a payment being considered failed, even though it may still be in flight. This vulnerability can lead to a total loss of funds for the node backend. Th...

CVE-2024-34694

LNbits vulnerable when using an Eclair backend: if a payment invoice fails to settle within the internal ~30s timeout, the system may treat it as failed even while the payment is in flight, potentially allowing total loss of funds at the node backend. This is documented across multiple sources (N...

Brave Desktop 1.67.115 Security Fixes

Fixed Brave Wallet WebHID connection prompt for Solana. Upgraded Chromium to 126.0.6478.56 — refer to Google Chrome advisories for inherited CVEs...

Malicious code in rb-payment-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4eb4113e8b820d0f3ed35205bfc6b682ce6bb937db31002b79c44bb723908e18 The OpenSSF Package Analysis project identified 'rb-payment-wallet' @ 0.1.2 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1561 Malicious code in rb-payment-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4eb4113e8b820d0f3ed35205bfc6b682ce6bb937db31002b79c44bb723908e18 The OpenSSF Package Analysis project identified 'rb-payment-wallet' @ 0.1.2 npm as malicious. It is considered malicious because: - The package...

WhatsApp cryptocurrency scam goes for the cash prize

This weekend a scammer tried his luck by reaching out to me on WhatsApp. It’s not that I don’t appreciate it, but trust me, it’s bad for your business. I received one message from a number hailing from the Togolese Republic. WhatsApp message from an unknow sender “Jay, your financial account has...

How Researchers Cracked an 11-Year-Old Password to a $3 Million Crypto Wallet

Thanks to a flaw in a decade-old version of the RoboForm password manager and a bit of luck, researchers were able to unearth the password to a crypto wallet containing a fortune...

Cuckoo Mac Malware Mimics Music Converter to Steals Passwords and Crypto

By Deeba Ahmed Cuckoo malware targets macOS users, stealing passwords, browsing history, crypto wallet details & more. Disguised as a music converter, it poses a major security risk. Learn how to protect yourself from this sophisticated infostealer. This is a post from HackRead.com Read the...

@jup-ag/dca-v2-sdk (>=0.0.0-beta-1, <=0.0.0-beta-9), @jup-ag/smart-wallet (>=0.0.0-beta-1, <=0.0.0-beta-9) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.75.0)

@solana/web3.js NPM version 1.75.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @jup-ag/dca-v2-sdk =0.0.0-beta-1, =0.0.0-beta-1, =0.0.31, =1.0.3 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J...

@convexitydmcc/wallet-adapter-walletconnect (>=2.0.0-beta.26, <=2.0.0-rc.5), @renec-foundation/gasless-sdk (>=0.2.3, <=0.2.6) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.48.0)

@solana/web3.js NPM version 1.48.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @convexitydmcc/wallet-adapter-walletconnect =2.0.0-beta.26, =0.2.3, =3.0.0-beta.1, =6.3.0-profits-mercurial-rc8 Source cves:...

@civic/multichain-connect-react-solana-wallet-adapter (>=0.0.0-alpha.1, <=0.0.3-beta.11), @debridge-finance/dln-client (>=5.1.0, <=8.2.2) +6 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.76.0)

@solana/web3.js NPM version 1.76.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @civic/multichain-connect-react-solana-wallet-adapter =0.0.0-alpha.1, =5.1.0, =2.11.0-alpha.0, =1.0.0, =0.1.1-alpha.8,...

@debridge-finance/solana-grpc (>=1.1.2, <=1.1.3), @mochi-web3/connect-wallet-widget (>=0.0.7, <=0.2.10) +2 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.74.0)

@solana/web3.js NPM version 1.74.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @debridge-finance/solana-grpc =1.1.2, =0.0.7, =0.2.2, =1.194.0, =1.261.0 Source cves: CVE-2024-30253 Source advisory:...

@brave/wallet-standard-brave (>=0.0.8, <=0.0.12), @oraichain/owallet-wallet-standard (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.58.0)

@solana/web3.js NPM version 1.58.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @brave/wallet-standard-brave =0.0.8, =0.1.0, =0.1.6, =0.1.10 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@3s-wallet-core/provider (>=0.0.2, <=0.0.3), @3s-wallet-core/wallet (0.0.4) +17 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.87.2, <=1.87.6)

@solana/web3.js NPM version =1.87.2, =0.0.2, =0.0.6, =0.1.9, =2.0.3, =0.0.1-alpha.1, =0.0.2, =2.0.0-alpha.15, =0.1.3-rc.1, =3.0.4-1, =0.2.2, =1.11.3-nobnb, =1.0.0, =1.1.0 and more Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...