Prototype Pollution

web3-core-subscriptions is vulnerable to Prototype Pollution. The vulnerability is due to improper handling of user-supplied input in the attachToObject function, which allows an attacker to inject properties into Object.prototype...

⚡ Weekly Recap: Lazarus Hits Web3, Intel/AMD TEEs Cracked, Dark Web Leak Tool & More

Cyberattacks are getting smarter and harder to stop. This week, hackers used sneaky tools, tricked trusted systems, and quickly took advantage of new security problems—some just hours after being found. No system was fully safe. From spying and fake job scams to strong ransomware and tricky...

North Korean Hackers Caught on Video Using AI Filters in Fake Job Interviews

North Korean hackers from the Famous Chollima group used AI deepfakes and stolen identities in fake job interviews to infiltrate crypto and Web3 companies...

MAL-2025-49319 Malicious code in web3-1-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8b0f3301c4d4556f7e8700121e0fa272e12f9fa0f75868720564356cdde51ed The package web3-1-4 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in web3-1-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8b0f3301c4d4556f7e8700121e0fa272e12f9fa0f75868720564356cdde51ed The package web3-1-4 was found to contain malicious code. Source: ossf-package-analysis...

Malicious Package

Overview web3-wc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in web3-wc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01c652a3b11d35f64a6e471fa1fadb5523c045ce3708e327d390c5cee28941a The package web3-wc was found to contain malicious code. Source: ghsa-malware f5ac56c88955ce71a2cb673c8d49d38f9e97e6af8e0f9a60969d0fd3d511586e Any...

EUVD-2025-37244

Malicious code in web3-wc npm...

MAL-2025-49274 Malicious code in web3-wc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01c652a3b11d35f64a6e471fa1fadb5523c045ce3708e327d390c5cee28941a The package web3-wc was found to contain malicious code. Source: ghsa-malware f5ac56c88955ce71a2cb673c8d49d38f9e97e6af8e0f9a60969d0fd3d511586e Any...

EUVD-2025-33655

Malicious code in web3-io-ethers npm...

Malicious code in web3-io-ethers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd381fcab62a4bb995de676e8d28ac7ce56d03bbe312d71965ff538360604c25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48239 Malicious code in web3-io-ethers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd381fcab62a4bb995de676e8d28ac7ce56d03bbe312d71965ff538360604c25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2023-43925

Malicious code in bioql PyPI...

EUVD-2025-31063

Malicious code in bioql PyPI...

EUVD-2025-31064

Malicious code in bioql PyPI...

EUVD-2024-0786

Malicious code in bioql PyPI...

EUVD-2024-50729

Malicious code in bioql PyPI...

CVE-2025-57330

The web3-core-subscriptions is a package designed to manages web3 subscriptions. A Prototype Pollution vulnerability in the attachToObject function of web3-core-subscriptions version 1.10.4 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causi...

CVE-2025-57329

web3-core-method is a package designed to creates the methods on the web3 modules. A Prototype Pollution vulnerability in the attachToObject function of web3-core-method version 1.10.4 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing...

0x-hunter-core (>=1.0.0-13, <=1.0.1-5), 0x-relayer-cat (>=0.0.3, <=0.0.10) +2129 more potentially affected by CVE-2025-57329 via web3-core-method (>=1.0.0-beta.52, <=1.10.3)

web3-core-method NPM version =1.0.0-beta.52, =1.0.0-13, =0.0.3, =0.0.31, =0.1.0, =0.115.0, =0.115.0, =0.115.0, =0.46.0, =0.46.0, =0.115.0, =0.115.0, =0.50.0, =0.115.0, =0.123.2 and more Source cves: CVE-2025-57329 Source advisory: OSV:GHSA-2J4C-9QQQ-896R...