7 matches found
Malicious code in @zkasm/zkevm-rom (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d383d50e39e2bae07fe90f53cbe2c8917b3fc778425f0dd973b8d50fc6592698 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3267 Malicious code in zkevm-rom (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebca28836b13291a84823420d145b2150d556abbd4d19fbf2dfeacf67a7553ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in zkevm-rom (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebca28836b13291a84823420d145b2150d556abbd4d19fbf2dfeacf67a7553ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3228 Malicious code in @zkasm/zkevm-rom (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d383d50e39e2bae07fe90f53cbe2c8917b3fc778425f0dd973b8d50fc6592698 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3266 Malicious code in zkevm-commonjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f97b3c164e028fa05d0832ddbf8afc66fa090caec4d50eac611b2132c8b24925 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in zkevm-commonjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f97b3c164e028fa05d0832ddbf8afc66fa090caec4d50eac611b2132c8b24925 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EVM Elliptic Curve Recovery Discrepancy
Lines of code Vulnerability details Impact The Ecrecover.yul file meant to simulate the ecrecover mechanism as executed by traditional ETH 1.0 consensus mechanisms is incorrect. In detail, it does not conform to the "Homestead" update which introduced an upper-bound check for s values of an r, s,...