19 matches found
Malicious code in chai-as-otc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf771adc4f92ba0d79ea56bdcc1e42db57d1bc7421f0dadb0544f619e16b5ca1 On module load, lib/initializeCaller.js required from index.js runs an IIFE that POSTs the full process.env to a base64-obfuscated endpoint decoding ...
MAL-2026-14491 Malicious code in chai-as-otc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf771adc4f92ba0d79ea56bdcc1e42db57d1bc7421f0dadb0544f619e16b5ca1 On module load, lib/initializeCaller.js required from index.js runs an IIFE that POSTs the full process.env to a base64-obfuscated endpoint decoding ...
Malicious Package
Overview chai-as-otc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...
Malicious Package
Overview hb-otc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malware in hb-otc
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in hb-otc (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b382c578afb33978acde21c28497857451795f4dea0da2d567e5df9a437e646e Any computer that has this package installed or running should be considered...
MAL-2025-44548 Malicious code in hb-otc (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b382c578afb33978acde21c28497857451795f4dea0da2d567e5df9a437e646e Any computer that has this package installed or running should be considered...
Malicious code in otc-docs-language (npm)
The package otc-docs-language was found to contain malicious code...
MAL-2025-28608 Malicious code in otc-docs-language (npm)
The package otc-docs-language was found to contain malicious code...
Malicious code in otc-echo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b0e38efe6cfc6243284d736f8569dc30c9f94b10388d60d4f0f323fbb84cf5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in otc-echo
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in otc-metadata (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 75435783250226bc7f234b0f98e4fb2b9777254a2ddbe179800f61577f6308e0 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-2983 Malicious code in otc-metadata (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 75435783250226bc7f234b0f98e4fb2b9777254a2ddbe179800f61577f6308e0 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Params.oracle can be changed to a fake one by front running NFTPairWithOracle's lend function
Lines of code Vulnerability details Impact As neither lend, nor updateLoanParams functions verify params.oracle, the lend call can be front run by a malicious borrower with changing params.oracle to a non-market one. The front run will be an updateLoanParams call where borrower introduces fake...
otc.ca Cross Site Scripting vulnerability OBB-2558654
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
otc.co.uk Cross Site Scripting vulnerability OBB-1358973
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
otc-mc.org Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1090156 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting otc-mc.org website and its...
otc-mc.org Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1085156 Security Researcher geeknik Helped patch 8710 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting otc-mc.org website and its...
otc-gooivecht.nl XSS vulnerability
Open Bug Bounty ID: OBB-650907 Description| Value ---|--- Affected Website:| otc-gooivecht.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...