Malicious code in free-tiktok-likes-app-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72b76b527a09e7e8e9f92f7ae5a4fd9c8a4072d8f9f8a16133281a7649b602d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3203 Malicious code in free-tiktok-fans-no-human-verification-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b48688d5ea103c4ba6fe7cdd28c57234b87995dc8cd1c11d83e25e72e0bcc63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3201 Malicious code in free-tiktok-fans-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28afdcd9e85193b186d42fda0d941d5338e307618a57a7cb4f148493cde9ebc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in free-tiktok-fans-no-human-verification-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b48688d5ea103c4ba6fe7cdd28c57234b87995dc8cd1c11d83e25e72e0bcc63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3204 Malicious code in free-tiktok-followers-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71539eb1144fdd67dc4b5f2cae114eee1587f90b1add1d1a64c7917331243491 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3206 Malicious code in free-tiktok-likes-app-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72b76b527a09e7e8e9f92f7ae5a4fd9c8a4072d8f9f8a16133281a7649b602d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in free-tiktok-fans-app-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c41d365859354862bb06e2872cfcbac6316737ddedabaada39aa922b0ce4dc90 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3205 Malicious code in free-tiktok-followers-app-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf98e9f3f1029127aed5d809c5651e29f198cafb17d6bf8a6290cae7eaad39aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3202 Malicious code in free-tiktok-fans-app-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c41d365859354862bb06e2872cfcbac6316737ddedabaada39aa922b0ce4dc90 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in free-tiktok-followers-app-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf98e9f3f1029127aed5d809c5651e29f198cafb17d6bf8a6290cae7eaad39aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5705 Malicious code in real-free-tiktok-fans-and-likes-followers-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e215ae3431673998e8941bc9cb07dbc1596c98f94b64622e4fba5e0943423ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tiktok-likes-fans (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ca6fc82d5002364bc19bf5af6cd74ebe2192aeef027b2e1ea09406fb47505ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6570 Malicious code in tiktok-likes-fans (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ca6fc82d5002364bc19bf5af6cd74ebe2192aeef027b2e1ea09406fb47505ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tiktok_embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7efd23c732b9d63531a53f0dc12b58d8c1cc7fbaec7d4c0ada1bef6fb113c4b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

TikTok: TikTok's pixel/sdk.js leaks current URL from websites using postMessage

A vulnerability was found where an oauth token could have been leaked due to an origin check bypass in the TikTok Pixel SDK. We thank @fransrosen for reporting this to our team...

Disinfo and Hate Speech Flood TikTok Ahead of Kenya’s Elections

Mozilla researchers identified accounts with millions of view spreading hate speech and disinformation...

CVE-2022-28799

The TikTok application before 23.7.3 for Android allows account takeover. A crafted URL unvalidated deeplink can force the com.zhiliaoapp.musically WebView to load an arbitrary website. This may allow an attacker to leverage an attached JavaScript interface for the takeover with one click...

CVE-2022-28799

The TikTok application before 23.7.3 for Android allows account takeover. A crafted URL unvalidated deeplink can force the com.zhiliaoapp.musically WebView to load an arbitrary website. This may allow an attacker to leverage an attached JavaScript interface for the takeover with one click...

CVE-2022-28799

The TikTok application before 23.7.3 for Android allows account takeover. A crafted URL unvalidated deeplink can force the com.zhiliaoapp.musically WebView to load an arbitrary website. This may allow an attacker to leverage an attached JavaScript interface for the takeover with one click...

Code injection

The TikTok application before 23.7.3 for Android allows account takeover. A crafted URL unvalidated deeplink can force the com.zhiliaoapp.musically WebView to load an arbitrary website. This may allow an attacker to leverage an attached JavaScript interface for the takeover with one click...