MAL-2024-1622 Malicious code in @corraldev/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ce1f827fc48514e74b4bd81dc008359f2284ff02be068cbae81851f6e2056ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1623 Malicious code in corraldev-activationsvc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 783e4eb475d74b1b4adc4aa4851393ded5ef222b3779734a8b1e4fe125605c6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @corraldev/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ce1f827fc48514e74b4bd81dc008359f2284ff02be068cbae81851f6e2056ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in corraldev-activationsvc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 783e4eb475d74b1b4adc4aa4851393ded5ef222b3779734a8b1e4fe125605c6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dependency-exploit-corraldev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3895d5ad9c43461c05e02f878b4bf13a8920b760d569e998be72839879492e30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Razer: [pay.gold.razer.com] Stored XSS - Order payment

The tester discovered that the pay.gold.razer.com site suffered from a Stored XSS issue that could be used to steal a client id and key. The tester worked with team to provide multiple POCs to help them resolve the issue. Razer appreciates all the assistance from corraldev, which was above and...