Malware in twilio-voice-js-reference-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in twilio-voice-js-reference-components (npm)

Source: amazon-inspector a3a57b06daad43c269fe3846083da2fdce277fd1ff3a9399533072f6e894afc2 Package impersonates the Twilio Voice JS SDK namespace and ships a single exfiltration payload. package.json declares "preinstall": "node index.js", causing index.js to run automatically on npm install with ...

serenity:FuzzJs: Bad-cast to AK::Array<AK::TypeErasedParameter, 0>JS::Reference::throw_reference_error in JS::Reference::get_value

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5217359508144128 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzJs Job Type: libfuzzerubsanserenity Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7fff81b50298 Crash Stat...

PT-2021-27825

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Use-after-poison READ 8. The crash state involves several function calls, including JS::Reference::put...

PT-2021-27711

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of Use-after-poison READ 8. The crash state involves several function calls, including JS::Reference::put value,...