MAL-2022-734 Malicious code in @ws-amplify/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd6ffd91fd9d98bf9d64e6357578ef8e199bea32dec9443dbb82dbdae7491218 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in amplify-codegen-e2e-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78ef98fa45356b629d8b18e241e11d0b1aaa3f8b0bd38d3a357fc6707c297ea7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-978 Malicious code in amplify-codegen-e2e-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78ef98fa45356b629d8b18e241e11d0b1aaa3f8b0bd38d3a357fc6707c297ea7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

amplify-now.com Cross Site Scripting vulnerability OBB-2360423

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Connect, Share, and Learn at Imperva Amplify 2021

On the heels of high-profile breaches, attacks e.g., Sunburst, Raindrop and COVID-19, rapid digital transformation places even more pressure on security. We’re seizing the opportunity to launch our first virtual user conference -- Imperva Amplify -- to share our knowledge so together, we can bett...

amplify-now.com Cross Site Scripting vulnerability OBB-1211390

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

X (Formerly Twitter): Multiple DOMXSS on Amplify Web Player

Hi, I would like to report multiple DOMXSS issues on https://amp.twimg.com/amplify-web-player/prod/source.html. Details: Please use latest IE to open all the PoCs because of CSP 1. $.get sink javascript define"data/playlist/withjsonloader", "require", "flight/lib/compose",...