92 matches found
Malicious code in braze-web-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5e81df6fadd36a9f51f5daab0483c919db2c42225a2e96eb0bf40c01be8eb16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in appboy-web-sdk-v2 (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0c15da90dc72a0bf53f2dccb6e0419535a29d50e59fb3de4b5fb7a2f72245ea Any computer that has this package install...
MAL-2025-59 Malicious code in appboy-web-sdk-v2 (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0c15da90dc72a0bf53f2dccb6e0419535a29d50e59fb3de4b5fb7a2f72245ea Any computer that has this package install...
CVE-2024-7059
A high-severity vulnerability that can lead to arbitrary code execution on the system hosting the Web SDK role was found in the Genetec Security Center product line...
CVE-2024-7059
Genetec Security Center Web SDK role contains a high-severity vulnerability with arbitrary code execution due to an Unsafe Reflection flaw. Affected are Security Center versions prior to 5.12.2.1; upgrading to 5.12.2.1 or later is the recommended remediation. The PT-2024-38049 entry supplies the ...
CVE-2024-7059
A high-severity vulnerability that can lead to arbitrary code execution on the system hosting the Web SDK role was found in the Genetec Security Center product line...
PT-2024-38049 · Genetech · Genetec Security Center
Name of the Vulnerable Software and Affected Versions: Genetec Security Center versions prior to 5.12.2.1 Description: A high-severity issue was found in the Genetec Security Center product line, allowing for arbitrary code execution on the system hosting the Web SDK role. This issue is related t...
MAL-2024-8897 Malicious code in onfido-web-sdk-angular (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b0dd02cb44d3292fc8de6ab92614219cc989a1d92d108bf83dc0a40883b44f0d The OpenSSF Package Analysis project identified 'onfido-web-sdk-angular' @ 0.1.0 npm as malicious. It is considered malicious because: - The...
MAL-2024-8093 Malicious code in yyb-monitor-web-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e875b3137112fba7095315990205008d6a37bdd38cf6fc166b7a7f3de1ada1c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-3016 Malicious code in sift-web-sdk (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in sift-web-sdk (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in recovery-center-web-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c243af7b9adcb93c55a9f9976096aa2a6470dbb50e45785b0cc87b3b4181afa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-2947 Malicious code in recovery-center-web-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c243af7b9adcb93c55a9f9976096aa2a6470dbb50e45785b0cc87b3b4181afa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in grablink-web-sdk (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2433 Malicious code in grablink-web-sdk (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @sber-sd/assistant-web-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82069e81085e1a22a51773833e3b1a9b2b492b06fa5249a27bd12e09c329e9f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1246 Malicious code in @sber-sd/assistant-web-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82069e81085e1a22a51773833e3b1a9b2b492b06fa5249a27bd12e09c329e9f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1161 Malicious code in galileo-web-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1ea1d3425cddab091828432f9dffef7f8bc36f5fbf9bcd0e01dffe737417e92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in galileo-web-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1ea1d3425cddab091828432f9dffef7f8bc36f5fbf9bcd0e01dffe737417e92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
