Skip to content

Synchronize repository#266198

Merged
samczsun merged 1 commit into
MetaMask:mainfrom
security-alliance-bot:84eacd14-443f-40d9-9698-6d09cc2edcc7
Jul 10, 2026
Merged

Synchronize repository#266198
samczsun merged 1 commit into
MetaMask:mainfrom
security-alliance-bot:84eacd14-443f-40d9-9698-6d09cc2edcc7

Conversation

@security-alliance-bot

@security-alliance-bot security-alliance-bot commented Jul 10, 2026

Copy link
Copy Markdown
Collaborator

This is an automated pull request to synchronize this repository with the latest configuration


Note

Medium Risk
Unblocking previously flagged domains can expose users if removals are incorrect; impact is limited to the specific hostnames removed.

Overview
Automated sync removes 37 hostname entries from the MetaMask phishing blocklist in src/config.json, leaving adjacent entries (e.g. nelwork.xyz) unchanged.

Dropped names are mostly short-lived scam-style TLDs around nelwork, nxsmutual, bylfg, hub-v1/v2, lite-v1, and v1–v4 debirdge, lend, and network variants—so those hosts would no longer trigger the wallet phishing warning unless they are listed elsewhere.

Reviewed by Cursor Bugbot for commit 7b95b10. Bugbot is set up for automated code reviews on this repo. Configure here.

@samczsun samczsun added the blocklist addition Issue or PR requesting addition of a domain to the blocklist label Jul 10, 2026
@samczsun samczsun merged commit ddfd184 into MetaMask:main Jul 10, 2026
6 checks passed
@security-alliance-bot security-alliance-bot deleted the 84eacd14-443f-40d9-9698-6d09cc2edcc7 branch July 10, 2026 00:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

blocklist addition Issue or PR requesting addition of a domain to the blocklist

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants