Malicious code in @apicity/meta (npm)

Source: amazon-inspector c76d2a899fc3db1427439c97acc4a873277804f6c771d524a3b93b70ff533581 dist/src/example.js at line 12 contains a reference to litter.catbox.moe, an anonymous mutable file-hosting service used as a second-stage payload host in the TanStack/Shai-Hulud npm supply-chain compromise...

PT-2023-2103 · Microsoft · Onedrive For Macos +1

Name of the Vulnerable Software and Affected Versions: OneDrive for Windows affected versions not specified OneDrive for MacOS affected versions not specified Description: The issue is related to insufficient access restrictions in the file hosting service, which can be exploited by an attacker t...