78 matches found
Malicious code in @amplify-components/amplify-table (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70abd4248b1a4ad04804bc31e5980f276eab9b5ce5b09a797225407fba9cfd02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-76 Malicious code in @amplify-components/amplify-table (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70abd4248b1a4ad04804bc31e5980f276eab9b5ce5b09a797225407fba9cfd02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in aws-amplify-unicorntrivia-workshop (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1ed06bee8e811d379842b46440e9174027b9d4ece63560f9ddc88cd44ae0102 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1191 Malicious code in aws-amplify-unicorntrivia-workshop (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1ed06bee8e811d379842b46440e9174027b9d4ece63560f9ddc88cd44ae0102 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-981 Malicious code in amplify-video (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c45ca3aa689f3135c4de255dcae8c501fc865a035dd4832c534f21488f8b8ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in amplify-video (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c45ca3aa689f3135c4de255dcae8c501fc865a035dd4832c534f21488f8b8ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in amplify-e2e-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcac320cdc49f3cae9cdb708f91d0f4e1075c323ddd818e7719f516e44fcc930 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in amplify-graphiql-explorer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1d3e576fc6b5204dca87f9ac269c183497998d162c90a7dcabf36447fa318ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-979 Malicious code in amplify-e2e-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcac320cdc49f3cae9cdb708f91d0f4e1075c323ddd818e7719f516e44fcc930 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-980 Malicious code in amplify-graphiql-explorer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1d3e576fc6b5204dca87f9ac269c183497998d162c90a7dcabf36447fa318ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in my-amplify-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ca4e255beea421e747da39e87ae71c9e3ce5cdd5b12d136087b0797a47848e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-734 Malicious code in @ws-amplify/core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd6ffd91fd9d98bf9d64e6357578ef8e199bea32dec9443dbb82dbdae7491218 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in amplify-codegen-e2e-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78ef98fa45356b629d8b18e241e11d0b1aaa3f8b0bd38d3a357fc6707c297ea7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-978 Malicious code in amplify-codegen-e2e-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78ef98fa45356b629d8b18e241e11d0b1aaa3f8b0bd38d3a357fc6707c297ea7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
amplify-now.com Cross Site Scripting vulnerability OBB-2360423
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Connect, Share, and Learn at Imperva Amplify 2021
On the heels of high-profile breaches, attacks e.g., Sunburst, Raindrop and COVID-19, rapid digital transformation places even more pressure on security. We’re seizing the opportunity to launch our first virtual user conference -- Imperva Amplify -- to share our knowledge so together, we can bett...
amplify-now.com Cross Site Scripting vulnerability OBB-1211390
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
X (Formerly Twitter): Multiple DOMXSS on Amplify Web Player
Hi, I would like to report multiple DOMXSS issues on https://amp.twimg.com/amplify-web-player/prod/source.html. Details: Please use latest IE to open all the PoCs because of CSP 1. $.get sink javascript define"data/playlist/withjsonloader", "require", "flight/lib/compose",...