26 matches found
MAL-2025-547 Malicious code in meli-auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2fd228933bfbd22b6537f1ebb684b7d183ba26dc3647c4b9cffb7e5a089ecac1 The OpenSSF Package Analysis project identified 'meli-auth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
MAL-2025-524 Malicious code in lyft-auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2c565f4f063903c396ce391a766b2f2e23376ee54056eed2f91fe4584c931069 The OpenSSF Package Analysis project identified 'lyft-auth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
Malicious code in oasis-auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bbbb6d6d51b6b4eae513979526b1a1d3c7c7b9947f319737a35fe899336adfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-34247 @keystone-6/auth Open Redirect vulnerability
Keystone is a content management system for Node.JS. There is an open redirect in the @keystone-6/auth package versions 7.0.0 and prior, where the redirect leading / filter can be bypassed. Users may be redirected to domains other than the relative host, thereby it might be used by attackers to...
Malicious code in @specials/ib-auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30e0d933078498a76da5a427205cc4a746095b8da74087d645cc41abcee0ab08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
[SECURITY] [DSA 659-1] New libpam-radius-auth packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 659-1 [email protected] http://www.debian.org/security/ Martin Schulze January 26th, 2005 http://www.debian.org/security/faq -...