196 matches found
Malicious code in fotkakukur (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9d31f7505c558cdd72721d54399f7370b937aeddcb487bb93364f35623aff3bd Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...
MAL-2023-456 Malicious code in fotkakukur (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9d31f7505c558cdd72721d54399f7370b937aeddcb487bb93364f35623aff3bd Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...
Malicious code in flying_pusher (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9091b084b192777c6cbacc1b67d67b879e2cdceda2b68082e975394f648cac68 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...
MAL-2023-8030 Malicious code in mpc-ap-styles (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3560796a4ad8974d74c898770846effa03442b79adace2bbc4679dc402afe911 Malicious packages campaign since 2021 targeting developers, steals source code and secrets...
MAL-2023-8009 Malicious code in ajaxmanager-custom (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx cbfc18e18de3ecf81548e9fff07c310df0c09ae04271fbe4e2f3e6872af6c549 Malicious packages campaign since 2021 targeting developers, steals source code and secrets...
MAL-2023-1227 Malicious code in lime-web-component-interfaces (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 94eb9bf47469857d8b3e3da68a34e320a0c7b1129a7b260fafe36dea5396cc0c Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ossf-package-analysis...
MAL-2023-8001 Malicious code in @pagseguro/ps-react-bootstrap (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 54f4ead0383d94bf30830e7ec4fcce7d84126a414c4fef7f4c55e2ce11ba9b34 Malicious packages campaign since 2021 targeting developers, steals source code and secrets...
MAL-2023-47 Malicious code in @pagseguro/pagseguro-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8e3f853a167ac4fc6f37a0c3b1b12bdba5e57f568800476f319399643b6b0fa9 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...
MAL-2023-7996 Malicious code in @pagseguro/nest (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx b16a70a89161283b99538bb25fdbaecc235a75a73c7a471c98ad831fc08a7cdf Malicious packages campaign since 2021 targeting developers, steals source code and secrets...
MAL-2023-7994 Malicious code in @pagseguro/axios-instance (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx a465c79cb8dc5ed82a72b242444916efda5a4f4db9bdd4a28c24b6a7994d350b Malicious packages campaign since 2021 targeting developers, steals source code and secrets...
MAL-2023-8003 Malicious code in @pagseguro/ps-security-services (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx dc36ef7ae93e63465de236217ebce560fe96cb785ae06b4a53b7d5733be61fbf Malicious packages campaign since 2021 targeting developers, steals source code and secrets...
MAL-2023-8000 Malicious code in @pagseguro/ps-logger (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 215b7859b73d06b74ebd0b73fe0a349c7de24b2e7e87046a0f92488d2d1f32fe Malicious packages campaign since 2021 targeting developers, steals source code and secrets...
MAL-2023-8004 Malicious code in @pagseguro/ps-validations (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2beafdb84bf2a244e2513a740eba0bbd433fbe300440bb3ac0efc51a55e7f77e Malicious packages campaign since 2021 targeting developers, steals source code and secrets...
MAL-2023-1098 Malicious code in @pagseguro/pagseguro-utils-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1ca218112e7cf19df5928168bb7ac862f943cd50af825db0fd09289b710a719d Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ossf-package-analysis...
MAL-2023-560 Malicious code in kuna-chart-header (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7b6783077178ab41482bc0e611e487453d9b0254e1e1ad5684b89472b002b2b4 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...
MAL-2023-701 Malicious code in prize-market (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1158c7ff397e59bc3ac71f973b0f8011d57ebb50ed376f780513195f5c97f596 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...
GoDaddy Discloses Multi-Year Security Breach Causing Malware Installations and Source Code Theft
Web hosting services provider GoDaddy on Friday disclosed a multi-year security breach that enabled unknown threat actors to install malware and siphon source code related to some of its services. The company attributed the campaign to a "sophisticated and organized group targeting hosting...
MAL-2023-8038 Malicious code in test-npm-com-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx eb86ecfecc56220476e3c33bd4f86f95c17be6c7a9a7a3cdc9ca822205076380 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ossf-package-analysis...
MAL-2022-7432 Malicious code in niroborg-com-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4460d2a87799e8994ee5e9255a29e3967eba081cba21c855381d14f9b608f72d Malicious packages campaign since 2021 targeting developers, steals source code and secrets...
CVE-2022-36552: Files or Directories Accessible to External Parties
Tenda AC6AC1200 v5.0 Firmware v02.03.01.114 and below contains an issue in the component /cgi-bin/DownloadFlash which allows attackers to steal all data such as source code and system files via a crafted GET request...