Malicious code in argo-checkout-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c373b0a40b665237b1cb71fe9e3719627c2bb16ff0658a673a3181666aa81bff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1084 Malicious code in argo-checkout-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c373b0a40b665237b1cb71fe9e3719627c2bb16ff0658a673a3181666aa81bff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Shopify: 'Limited' RCE in certain places where Liquid is accepted

Short ==== Certain interfaces where a shop owner/administrator is able to utilize Liquid have access to methods and properties of certain Drops. This allows calling all methods of the object and access to all properties. While this sounds bad, it seems to be very limited and seems to be 'only'...