@01ht/ht-api-helper-functions (>=1.0.0 <=1.0.2), @1amageek/document-propagator (>=0.1.0 <=0.10.0) +1670 more potentially affected by CVE-2023-6460 via @google-cloud/firestore (>=0.10.2 <=5.0.2)

@google-cloud/firestore NPM version =0.10.2, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =1.0.24, =0.0.1, =0.0.5, =0.0.1, =0.1.17, =1.0.0, =1.0.5, =1.0.6 - @aeyrium/faa-parser =1.0.3 and more Source cves: CVE-2023-6460 Source advisory: OSV:GHSA-4G6Q-77J7-VVJC...

Mac-Focused Malvertising Campaign Abuses Google Firebase DBs

A malvertising group named VeryMal that targets Mac users has changed up its tactics, ditching steganography as its obfuscation technique. Instead, it’s using ad tags that fetch a payload from Google Firebase in order to redirect users to malicious pop-ups. Confiant estimates that close to 1...