3346 matches found
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package version contains malicious code that monitors network traffic when run in a browser and targets crypto transactions. The injected malicious code activates a hook whenever a Web3 wallet is present...
Malicious npm Packages Impersonate Flashbots, Steal Ethereum Wallet Keys
A new set of four malicious packages have been discovered in the npm package registry with capabilities to steal cryptocurrency wallet credentials from Ethereum developers. "The packages masquerade as legitimate cryptographic utilities and Flashbots MEV infrastructure while secretly exfiltrating...
MAL-2025-41557 Malicious code in ethersjs3-wallet (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ethersjs3-wallet (npm)
--- -= Per source details. Do not edit below this line.=-...
Embeded Malicious Code
Overview nx is a The core Nx plugin contains the core functionality of Nx like the project graph, nx commands and task orchestration. Affected versions of this package are vulnerable to Embeded Malicious Code through a malicious postinstall script that triggers a file named telemetry.js. A...
HOOK Android Trojan Adds Ransomware Overlays, Expands to 107 Remote Commands
Cybersecurity researchers have discovered a new variant of an Android banking trojan called HOOK that features ransomware-style overlay screens to display extortion messages. "A prominent characteristic of the latest variant is its capacity to deploy a full-screen ransomware overlay, which aims t...
Malicious Package
Overview qbittensor is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a typosquatting campaign targeting the Bittensor ecosystem. The goal of the attackers is to steal cryptocurrency from...
Malicious Package
Overview bitensor is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a typosquatting campaign targeting the Bittensor ecosystem. The goal of the attackers is to steal cryptocurrency from...
Malicious Package
Overview bittenso is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a typosquatting campaign targeting the Bittensor ecosystem. The goal of the attackers is to steal cryptocurrency from...
Malicious Package
Overview bittenso-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a typosquatting campaign targeting the Bittensor ecosystem. The goal of the attackers is to steal cryptocurrency fro...
A Comprehensive Review of Denial of Wallet Attacks in Serverless Architectures
The Denial of Wallet DoW attack poses a unique and growing threat to serverless architectures that rely on Function-as-a-Service FaaS models, exploiting the cost structure of pay-as-you-go billing to financially burden application owners. Unlike traditional Denial of Service DoS attacks, which ai...
Malicious code in hathor-wallet-headless (npm)
The package hathor-wallet-headless was found to contain malicious code...
Malicious code in soraneo-wallet-web (npm)
The package soraneo-wallet-web was found to contain malicious code...
Malicious code in solana-wallet-discord-tracker (npm)
The package solana-wallet-discord-tracker was found to contain malicious code...
MAL-2025-33433 Malicious code in sls-wallet-orders (npm)
The package sls-wallet-orders was found to contain malicious code...
Malicious code in easy-wallet (npm)
The package easy-wallet was found to contain malicious code...
Malicious code in mage-wallet-js (npm)
The package mage-wallet-js was found to contain malicious code...
MAL-2025-22261 Malicious code in hathor-wallet-headless (npm)
The package hathor-wallet-headless was found to contain malicious code...