MAL-2022-19 Malicious code in 18f-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2fb047b79df818c0c5d0f2f262bfbdca93a4c550b863e5ee9d4f9ddb7ad99f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GSA Bounty: Cross-Site Request Forgery on the Federalist API (all endpoints), using Flash file on the attacker's host

We endorse sp1d3rs's summary! The PR fixing this ticket is here: https://github.com/18F/federalist/pull/1157 Thanks to the 18F team for the great experience, fast fix, and the bounty! The report details i requested the limited disclosure due to lot of sensitive info in the attachments and report...