4 matches found
MAL-2026-10058 Malicious code in cookie-js-ease (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2908ef4ab9f019d4675b39066f876acb959cd9814b47bb66f8f4554c517abe0d [email protected] impersonates the popular js-cookie library same repository URL, banner comment, API surface, and reused upstream author name...
Malicious code in wm-cookies-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d538066b0051af1f54e7f610555a094887e4cbe9703bb8c4276cf979e0d3230d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7191 Malicious code in wm-cookies-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d538066b0051af1f54e7f610555a094887e4cbe9703bb8c4276cf979e0d3230d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2015-3801
CVE-2015-3801 affects Apple iOS WebKit’s CFNetwork Cookies: the document.cookie API could be used to bypass a single-cookie restriction in WebKit’s cookie handling, prior to iOS 9. The issue originates in CFNetwork Cookies (WebKit) and is exploitable via unspecified vectors over the network. The ...