Malicious code in @msmg/vue-auth-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05441db2f3376f49351058c182d5b20ef5106ca27a1ab2e1b98b7e0bdf8f82a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-440 Malicious code in @msmg/vue-auth-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05441db2f3376f49351058c182d5b20ef5106ca27a1ab2e1b98b7e0bdf8f82a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4754 Malicious code in mycompany-internal-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4aa4a08baf141a84666e9885bb98c18c857a39dfa015c752ef9de59d01cd57e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mycompany-internal-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4aa4a08baf141a84666e9885bb98c18c857a39dfa015c752ef9de59d01cd57e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6322 Malicious code in strapi-provider-upload-aws-s3-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1d24b53a4fdd8c047f1239905fddd51ae8f1cb40bc6e5de7f014a3c4d9595aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-748 Malicious code in @xvideos/auth-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a93bb22648b5540c11735a8901b86f8e243ebb4237cabf6d929d18bb2c3ba806 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bfx-facs-auth-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b472865a206702723408d6da2983fce52eda07befe86ec726a3e94f08363879 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1515 Malicious code in bfx-facs-auth-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b472865a206702723408d6da2983fce52eda07befe86ec726a3e94f08363879 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bouncer-auth-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba840a3603c5e477dbcc3b46d1e6b6ba1f80bb84474a2572278c7ac03817b78a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1659 Malicious code in bouncer-auth-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba840a3603c5e477dbcc3b46d1e6b6ba1f80bb84474a2572278c7ac03817b78a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vgs-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea7450a9256eaa2a5b3697fa941aac508944ea795e005119495b21835bbe195a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6911 Malicious code in vgs-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea7450a9256eaa2a5b3697fa941aac508944ea795e005119495b21835bbe195a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1713 Malicious code in buffer-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68d24447a013a577c7a828dad7c39ee67ab30aefee217cc3cd9ec44d6de78b3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in buffer-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68d24447a013a577c7a828dad7c39ee67ab30aefee217cc3cd9ec44d6de78b3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in buffer-auth-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f75e8e48062b53ad973d8acf955f83684b9339889580c0c48a5324c77471d2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1714 Malicious code in buffer-auth-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f75e8e48062b53ad973d8acf955f83684b9339889580c0c48a5324c77471d2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in core-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bdfd71008501f118552100797abf6fb298f1db14a272dda22ede246874ef20c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2190 Malicious code in core-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bdfd71008501f118552100797abf6fb298f1db14a272dda22ede246874ef20c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6954 Malicious code in voicemail-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49069432ab7ae202e87a0c30a1b09b23452139760e09eb5abf07f85392d2fbb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Authentication Bypass

parse-server is vulnerable to authentication bypass. The vulnerability exists because the certificate in auth adapter is not properly validated. An attacker is able to bypass authentication checks by making a fake certificate accessible via certain Apple domains and providing the URL to that...