Malicious code in uber-purify (npm)

The package uber-purify was found to contain malicious code...

MAL-2025-8070 Malicious code in @hopper-b2b/uber-iframe (npm)

The package @hopper-b2b/uber-iframe was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in @hopper-b2b/uber-iframe (npm)

The package @hopper-b2b/uber-iframe was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Fedora: Security Advisory (FEDORA-2024-ec60f79b80)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress plugin UberSlider SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

MAL-2025-254 Malicious code in uber-direct-js-sdk-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30ee8294ed2bcf683f478b647f9919d6b45e0651905c29ada14a3ce392168447 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uber-direct-js-sdk-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30ee8294ed2bcf683f478b647f9919d6b45e0651905c29ada14a3ce392168447 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-110 Malicious code in uber-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7535a49e8f078514b8d362db1cbcacc6f91e202279199d22c199ae128bbcf1f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uber-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7535a49e8f078514b8d362db1cbcacc6f91e202279199d22c199ae128bbcf1f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uber-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0fa7ffb884674d60abc64c70868821ad5ddf53d08897d0b90570c2d47ad780f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-107 Malicious code in uber-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b42422c68e4256dc883e7d5e02350870cab3c0068d92985ffa4c4bc4ab43df8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uber-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddfbcc0bce009349873248f526418b14cb9c9f9b575e74b3fc1787fda4af9b76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uber-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b42422c68e4256dc883e7d5e02350870cab3c0068d92985ffa4c4bc4ab43df8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-109 Malicious code in uber-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddfbcc0bce009349873248f526418b14cb9c9f9b575e74b3fc1787fda4af9b76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-108 Malicious code in uber-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0fa7ffb884674d60abc64c70868821ad5ddf53d08897d0b90570c2d47ad780f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uber-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 514527f85a2deb8975f95374694c5dc8a3d09d328d3cb7adc36ea16d071367ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-106 Malicious code in uber-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 514527f85a2deb8975f95374694c5dc8a3d09d328d3cb7adc36ea16d071367ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fedora 41 : golang-uber-mock (2024-ec60f79b80)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-ec60f79b80 advisory. Automatic update for golang-uber-mock-0.4.0-1.fc41. Changelog Sat Mar 23 2024 Mikel Olasagasti Uranga - 0.4.0-1 - Update to 0.4.0 - Closes rhbz2271191...

Dutch Regulator Fines Uber €290 Million for GDPR Violations in Data Transfers to U.S.

The Dutch Data Protection Authority DPA has fined Uber a record €290 million $324 million for allegedly failing to comply with European Union E.U. data protection standards when sending sensitive driver data to the U.S. "The Dutch DPA found that Uber transferred personal data of European taxi...

A week in security (June 24 – June 30)

Last week on Malwarebytes Labs: TEMU sued for being "dangerous malware" by Arkansas Attorney General Driving licences and other official documents leaked by authentication service used by Uber, TikTok, X, and more "Poseidon" Mac stealer distributed via Google ads Federal Reserve "breached" data m...