Malicious code in community-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88ee67899ec744ae763315d51938fe74eec518bc6e0f550a88743971ecb2d259 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paypal-sdk-spec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 641111da134e219b032f3fdca4837630c098df34fc322c1d5f6bd41310c85974 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5245 Malicious code in paypal-sdk-spec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 641111da134e219b032f3fdca4837630c098df34fc322c1d5f6bd41310c85974 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in frontend-framework-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3249f5205a1b92d8e4fa170c1209732d6d43bcf2a5b6681aa3176e38a4c358cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3221 Malicious code in frontend-framework-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3249f5205a1b92d8e4fa170c1209732d6d43bcf2a5b6681aa3176e38a4c358cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paypal-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c567ab6669d4641b8be74f34c75ca064781ccced7753e64dfa6e3c6212fcfb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5241 Malicious code in paypal-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c567ab6669d4641b8be74f34c75ca064781ccced7753e64dfa6e3c6212fcfb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5242 Malicious code in paypal-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2dbdf2f5ad866355a0a2188cfabf78be811027c4b9fd82b16212cfb3136e3bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paypal-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2dbdf2f5ad866355a0a2188cfabf78be811027c4b9fd82b16212cfb3136e3bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paypal-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f52e534e2e7600406f1799a02a19f324ecf2af590d237af66cd669413c28af5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5240 Malicious code in paypal-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f52e534e2e7600406f1799a02a19f324ecf2af590d237af66cd669413c28af5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7012 Malicious code in vxpattern-lib-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1389b0ec7c0190e59b05c9c0bcab3dcaad7fbf57a1f3228819e0ed647724850 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paypal-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd97a9d3e6b3e04b36b277193e7886377a2ab022ec1ea936f004cf28b20cc621 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5246 Malicious code in paypal-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd97a9d3e6b3e04b36b277193e7886377a2ab022ec1ea936f004cf28b20cc621 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Magento 2 Community Edition DoS vulnerability

A denial-of-service DoS vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. By abusing insufficient brute-forcing defenses in the token exchange protocol, an unauthenticated attacker could disrupt transactions between the Magento merchant a...

GHSA-HRG3-4Q56-P2Q5 Magento 2 Community Edition DoS vulnerability

A denial-of-service DoS vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. By abusing insufficient brute-forcing defenses in the token exchange protocol, an unauthenticated attacker could disrupt transactions between the Magento merchant a...

paypal/adaptivepayments-sdk-php vulnerable to a reflected XSS

paypal/adaptivepayments-sdk-php v3.9.2 is vulnerable to a reflected XSS in the SetPaymentOptions.php resulting code execution...

GHSA-9R4X-3534-W3F9 paypal/adaptivepayments-sdk-php vulnerable to a reflected XSS

paypal/adaptivepayments-sdk-php v3.9.2 is vulnerable to a reflected XSS in the SetPaymentOptions.php resulting code execution...

New Unpatched Bug Could Let Attackers Steal Money from PayPal Users

A security researcher claims to have discovered an unpatched vulnerability in PayPal's money transfer service that could allow attackers to trick victims into unknowingly completing attacker-directed transactions with a single click. Clickjacking, also called UI redressing, refers to a technique...

MAL-2022-5243 Malicious code in paypal-rest-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f5c6beb6bf6ebdd58d3baff1e4017eacb25c5cda9a802eb8dbb5e2d2abbd8b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...