Malicious code in sol_web3_helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1bc63c11f5b8fec0c212369623282a5e4185ff1541e90e8cbefc9f41bfb4b9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-11365

The Crypto and DeFi Widgets – Web3 Cryptocurrency Shortcodes plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.1.6. This makes it possible for unauthenticated attackers...

CVE-2024-11365 Crypto and DeFi Widgets – Web3 Cryptocurrency Shortcodes <= 1.1.6 - Reflected Cross-Site Scripting

The Crypto and DeFi Widgets – Web3 Cryptocurrency Shortcodes plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.1.6. This makes it possible for unauthenticated attackers...

CVE-2024-11365 Crypto and DeFi Widgets – Web3 Cryptocurrency Shortcodes <= 1.1.6 - Reflected Cross-Site Scripting

The Crypto and DeFi Widgets – Web3 Cryptocurrency Shortcodes plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.1.6. This makes it possible for unauthenticated attackers...

How Bitcoin’s digital signature feature facilitates Web3 adoption

Bitcoin is a pioneer in technological advancement and decentralization. As its creator states in the white paper, peer-to-peer…...

PT-2024-16937 · WordPress · The Crypto/Defi Widgets – Web3 Cryptocurrency Shortcodes

Name of the Vulnerable Software and Affected Versions: The Crypto and DeFi Widgets – Web3 Cryptocurrency Shortcodes plugin for WordPress versions up to, and including, 1.1.6 Description: The issue arises from the use of add query arg without proper escaping on the URL, allowing unauthenticated...

Malicious code in web3-sol-checker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9704c1fb065692d13d24ded9ed724f28e789c28e46fa75a315fd0747ea1ef7e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10628 Malicious code in web3-sol-checker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9704c1fb065692d13d24ded9ed724f28e789c28e46fa75a315fd0747ea1ef7e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3-helpers.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b4f43eb01c69ebcb1293d0134dc7fa64f02d938354439483848597057842229 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10622 Malicious code in solana-web3-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcf9d5b7aec80f6f8909d8b65170940ecf00b096f922f111da7848b86257088c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10627 Malicious code in web3-helpers.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b4f43eb01c69ebcb1293d0134dc7fa64f02d938354439483848597057842229 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10625 Malicious code in web3-bundle-helper.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 729e976ca90d0da39690eb9bc2f2a5a14b9e029246f0ea555031156fed4114d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3-bundle-helper.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 729e976ca90d0da39690eb9bc2f2a5a14b9e029246f0ea555031156fed4114d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3-bundle-helpers.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68813bb35808cbd5a214c8d01a2243e1d1e80df5cd37d11413bbedd08ffd9e44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3-toekn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53b34b72b8ff8d01e0d648851125a64aec37c620314f8895fea14db88514aac9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10530 Malicious code in web3-toekn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53b34b72b8ff8d01e0d648851125a64aec37c620314f8895fea14db88514aac9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10444 Malicious code in web3-provdr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 487d942789866e82a0d3c0ef2d9af0d928bfcc087ed319f5c5c2155c4a621d9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3-provdr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 487d942789866e82a0d3c0ef2d9af0d928bfcc087ed319f5c5c2155c4a621d9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Supply chain attack on lottie-player: everything you need to know

Supply chain attack in popular lottie-player library compromises websites with malicious Web3 wallet prompts – update or revert the library to avoid the compromised versions...

MAL-2024-9425 Malicious code in ethers-web3 (npm)

The package contains additional code to append a hardcoded SSH key to the user's authorizedkeys file, creating a backoor, along with exfiltrating user private keys to an attack-controlled server...