PayPal phishing campaign goes after more than just your login credentials

A new phishing campaign targeting PayPal users aims to get extensive data from potential victims. The data its after includes government documents like passport, as well as selfie photos. In a nutshell, its an extensive form of information theft, the likes of which could result in someones identi...

The Kit That Wants It All: Scam Mimics PayPal?s Known Security Measures

Identity theft affects millions of people every year. See this piece on a scam purporting to be PayPal in an effort to gain total identity theft...

The Kit That Wants It All: Scam Mimics PayPal’s Known Security Measures

Identity theft affects millions of people every year. See this piece on a scam purporting to be PayPal in an effort to gain total identity theft...

Malicious Package

Overview dw-header-footer-paypal is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview header-footer-paypal is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

Atlassian Confluence OGNL Injection POC Vulnerability CVE-202...

MAL-2022-2296 Malicious code in cwpattern-lib-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a11073993604b52c3fb8ea34661d29f0b623df28896d64893a1705445c91e2e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5248 Malicious code in paypay-ecommerce-miniapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1b7ace2d557b78c19ca9d9f0d89799a93ced84a6b8f9715dfcc460999be4178 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paypal-sdk-e2e-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbf78f6e3c0804dd208733f5a6a2c666614467a873d68214580d2f183b1dc35f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5244 Malicious code in paypal-sdk-e2e-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbf78f6e3c0804dd208733f5a6a2c666614467a873d68214580d2f183b1dc35f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-paypal-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e19734e85af1c9f0485c8fca16befedf911d181677066a7eedde82cfc9206cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5666 Malicious code in react-paypal-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e19734e85af1c9f0485c8fca16befedf911d181677066a7eedde82cfc9206cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3610 Malicious code in here-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90e9aaca75bdf60b65470c5fcaa152405a670b25630ea9934606130862dca87b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in here-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90e9aaca75bdf60b65470c5fcaa152405a670b25630ea9934606130862dca87b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in status-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0530b2a24f5092b3138b6e9f7fc463e26809e8cabe05d0ac217697be7c33f2d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in corp-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5985fe348b5a502f0e320ec7b1b54948767982060f55bd2ca95ff05145fcbe25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2202 Malicious code in corp-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5985fe348b5a502f0e320ec7b1b54948767982060f55bd2ca95ff05145fcbe25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5449 Malicious code in prepaid-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c68d977d75c5f9cd78d29e0aed942e0027de8b85b841b415f2aa34cbb91bd442 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prepaid-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c68d977d75c5f9cd78d29e0aed942e0027de8b85b841b415f2aa34cbb91bd442 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6300 Malicious code in status-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0530b2a24f5092b3138b6e9f7fc463e26809e8cabe05d0ac217697be7c33f2d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...