MAL-2022-1599 Malicious code in bitwarden-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75d973d875982986eb99ad1eeecd1b5f9684d77f50ba4f8e42a77b68b02fc30c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bitwarden-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75d973d875982986eb99ad1eeecd1b5f9684d77f50ba4f8e42a77b68b02fc30c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in bitwarden-web

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

WS-2021-0151

In “Bitwarden/web”, v1.6.0 to v1.9.1 do not properly implement a defense against timing attacks on mac verification. This allows a remote attacker to guess the correct bytes of the tag by looping over all possible first bytes and stop when verification takes a little longer, by repeating this...