553 matches found
Malicious code in rose-web3-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86e7bba39177d14d11698b3ccaeca36599df068894146efc99d0ded173449d9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in web3-transaction-fetch (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63a3a91b39e7804776f460e61b29fcfbece7076ea6eec3c53e51ea02270b353f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4520 Malicious code in web3-transaction-fetch (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63a3a91b39e7804776f460e61b29fcfbece7076ea6eec3c53e51ea02270b353f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in web3-evm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47f8566107060326567a6d66ac66f3c457f9a24142c7c3694200e07af63e9e27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4456 Malicious code in web3-evm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47f8566107060326567a6d66ac66f3c457f9a24142c7c3694200e07af63e9e27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-12265
The Web3 Crypto Payments by DePay for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /wp-json/depay/wc/debug REST API endpoint in all versions up to, and including, 2.12.17. This makes it possible for unauthenticated attacker...
CVE-2024-54134
A publish-access account was compromised for @solana/web3.js, a JavaScript library that is commonly used by Solana dapps. This allowed an attacker to publish unauthorized and malicious packages that were modified, allowing them to steal private key material and drain funds from dapps, like bots,...
CVE-2024-11365
The Crypto and DeFi Widgets – Web3 Cryptocurrency Shortcodes plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.1.6. This makes it possible for unauthenticated attackers...
CVE-2023-50053
An issue in Foundation.app Foundation platform 1.0 allows a remote attacker to obtain sensitive information via the Web3 authentication process of Foundation, the signed message lacks a nonce random number...
CVE-2023-3249
The Web3 – Crypto wallet Login & NFT token gating plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.6.0. This is due to incorrect authentication checking in the 'hiddenformdata' function. This makes it possible for authenticated attackers to log in as...
CVE-2023-6036
The Web3 WordPress plugin before 3.0.0 is vulnerable to an authentication bypass due to incorrect authentication checking in the login flow in functions 'handleauthrequest' and 'hadleloginrequest'. This makes it possible for non authenticated attackers to log in as any existing user on the site,...
Malicious code in web3-validators (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-4268 Malicious code in web3-validators (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in web3-requests (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-4267 Malicious code in web3-requests (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in web3-request (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in web3-request-1-8-54 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-4266 Malicious code in web3-request-1-8-54 (PyPI)
--- -= Per source details. Do not edit below this line.=-...