0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
web3-eth-util
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting web3-eth-util, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-6325 | Unknown | Malicious code in web3-eth-util (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (f2e70ad91037bdc97e6b1ab8c95f5f2b5eecdb4524582d79dae5f240cbdbfc29) Package name and metadata impersonate the legitimate @ethereumjs/util / ethereumjs-util packages: README is copied verbatim from the upstream ethereumjs project (and even instructs users to `npm install eth-util`), the contributor list and repository URL point at ethereumjs/ethereumjs-monorepo, but the package is published under a different name and ownership. The published dist/index.js (line ~57) contains `require("assertcore")` and packa |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (f2e70ad91037bdc97e6b1ab8c95f5f2b5eecdb4524582d79dae5f240cbdbfc29) Package name and metadata impersonate the legitimate @ethereumjs/util / ethereumjs-util packages: README is copied verbatim from the upstream ethereumjs project (and even instructs users to `npm install eth-util`), the contributor list and repository URL point at ethereumjs/ethereumjs-monorepo, but the package is published under a different name and ownership. The published dist/index.js (line ~57) contains `require("assertcore")` and packa