553 matches found
MAL-2025-2129 Malicious code in sol-web3-bundler (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e73dbdaf8639ea1c473efeb0189d43de845d8508ed24ce8a3875f0acd549d1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in bsc-web3-bundler (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2d03484f0d23a8270e14878fbc772aa9463ff4c69612a411ca078c52e1b19b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sol-web3-bundler (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e73dbdaf8639ea1c473efeb0189d43de845d8508ed24ce8a3875f0acd549d1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in web3-2-alpha (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b4594c9bb4674f2a9f165fc30fb2a0a4422504c322e19dae701700c87444fcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in solana-web3.js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae0ba85746959ae8f7ae3dc7a934de9e4cb299669dbb270322fa2d8871fd8326 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SparkCat Malware Uses OCR to Extract Crypto Wallet Recovery Phrases from Images
A new malware campaign dubbed SparkCat has leveraged a suit of bogus apps on both Apple's and Google's respective app stores to steal victims' mnemonic phrases associated with cryptocurrency wallets. The attacks leverage an optical character recognition OCR model to exfiltrate select images...
CVE-2024-21505
Versions of the package web3-utils before 4.2.1 are vulnerable to Prototype Pollution via the utility functions format and mergeDeep, due to insecure recursive merge. An attacker can manipulate an object's prototype, potentially leading to the alteration of the behavior of all objects inheriting...
MAL-2025-1236 Malicious code in web3-trade (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8535d63f8ed51333fab465ed5f1b0997affed89872dea1d6d384a25c17112caa Any computer that has this package installed or running should be considered...
Malicious code in web3-trade (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8535d63f8ed51333fab465ed5f1b0997affed89872dea1d6d384a25c17112caa Any computer that has this package installed or running should be considered...
Malicious code in web3-eth (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1006 Malicious code in web3-eth (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in eth-web3 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-921 Malicious code in eth-web3 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1195 Malicious code in web3-onboard-sandbox (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 539dc0279cc6a739adf371f7670ad0946dfd3a95b07e9f55f88a2047dc7568eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in web3-onboard-sandbox (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 539dc0279cc6a739adf371f7670ad0946dfd3a95b07e9f55f88a2047dc7568eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in web3-parser (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f572ff12e76b413beb79e843e9a403a5708b245f9f7ba85d18119e1074bf4fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-582 Malicious code in web3-parser (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f572ff12e76b413beb79e843e9a403a5708b245f9f7ba85d18119e1074bf4fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Lazarus Group Targets Web3 Developers with Fake LinkedIn Profiles in Operation 99
The North Korea-linked Lazarus Group has been attributed to a new cyber attack campaign dubbed Operation 99 that targeted software developers looking for freelance Web3 and cryptocurrency work to deliver malware. "The campaign begins with fake recruiters, posing on platforms like LinkedIn, luring...
2vyper (=0.3.0), ape-dasy (=0.1.0) +30 more potentially affected by CVE-2025-21607 via vyper (>=0.1.0b12 <=0.4.0)
vyper PYPI version =0.1.0b12, =0.7.1, =0.1.0, =0.0.0, =0.0.0, =0.0.5, =0.1.0, =0.1.0, =0.7.2, =0.1.10.0, =1.0.1, =0.1.0, =1.4.0, =1.20.7 and more Source cves: CVE-2025-21607 Source advisory: OSV:PYSEC-2025-33...
