Malicious code in flowdefi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e410fabd766facf41c970113c2a0a1b06b67b82521ffae20a32328cd74994e On npm install, the package's preinstall hook executes node index.js, which collects the host's os.hostname, os.userInfo.username, current working...

MGASA-2020-0181 Updated git packages fix security vulnerability

Updated git packages fix security vulnerability: Malicious URLs can still cause Git to send a stored credential to the wrong server CvE-2020-111008. With a crafted URL that contains a newline or empty host, or lacks a scheme, the credential helper machinery can be fooled into providing credential...