Malicious code in ai-fast-auto-trader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b2575eb64d69c961ae4e503747238d564d354049b7bdc75c814eceaa941fd5 The package ai-fast-auto-trader was found to contain malicious code...

EUVD-2014-5884

Malware in sbrugna...

CVE-2014-5997

The Auto Trader aka za.co.autotrader.android.app application 2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Auto Trader aka za.co.autotrader.android.app application 2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5997

The Auto Trader aka za.co.autotrader.android.app application 2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5997

The CVE-2014-5997 entry concerns the Auto Trader Android app (za.co.autotrader.android.app) version 2, which fails to verify X.509 certificates from SSL servers. This missing certificate validation allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted ...

CVE-2014-5997: Undefined Security Weakness

The Auto Trader aka za.co.autotrader.android.app application 2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...