Malicious Package

Overview xrpl-dev-portal is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-1221 Malicious code in xrpl-dev-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e19d7ccfb5e9bebce90f062b458b8ac38691519308db3cb6bf846b54a387dad9 The package xrpl-dev-portal was found to contain malicious code. Source: ghsa-malware 4fda3daad7ee020ce9cee13e48a40a89de8040cc479f0c4ac9687198ccd576c...

Malicious code in xrpl-dev-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e19d7ccfb5e9bebce90f062b458b8ac38691519308db3cb6bf846b54a387dad9 The package xrpl-dev-portal was found to contain malicious code. Source: ghsa-malware 4fda3daad7ee020ce9cee13e48a40a89de8040cc479f0c4ac9687198ccd576c...

EUVD-2019-5962

Malware in sbrugna...

Moderate: Red Hat Security Advisory: Red Hat Developer Hub 1.6.5 release.

Red Hat Developer Hub 1.6.5 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

Malicious code in dev-portal-common (npm)

The package dev-portal-common was found to contain malicious code...

MAL-2025-18344 Malicious code in dev-portal-common (npm)

The package dev-portal-common was found to contain malicious code...

Malicious code in xrpl-org-dev-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 200d97a2ec5482269915689627e76de8f5f274aadcabbdae30f3dcd313fe599b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7296 Malicious code in xrpl-org-dev-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 200d97a2ec5482269915689627e76de8f5f274aadcabbdae30f3dcd313fe599b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2019-14836

A vulnerability was found that the 3scale dev portal does not employ mechanisms for protection against login CSRF. An attacker could use this flaw to access unauthorized information or conduct further attacks...

CVE-2019-14836

A vulnerability was found that the 3scale dev portal does not employ mechanisms for protection against login CSRF. An attacker could use this flaw to access unauthorized information or conduct further attacks...

Design/Logic Flaw

A vulnerability was found that the 3scale dev portal does not employ mechanisms for protection against login CSRF. An attacker could use this flaw to access unauthorized information or conduct further attacks...

CVE-2019-14836

CVE-2019-14836 concerns Red Hat 3scale Dev Portal where login CSRF protection is absent. The connected documents consistently state the vulnerability stems from the login form not validating CSRF tokens, enabling an attacker to access unauthorized information or conduct further attacks. Affected ...

PT-2021-8982 · Red Hat · 3Scale Dev Portal

Name of the Vulnerable Software and Affected Versions: 3scale dev portal affected versions not specified Description: A flaw was discovered in the 3scale dev portal where it does not employ mechanisms for protection against login CSRF. This allows an attacker to access unauthorized information or...

CVE-2019-4444

IBM API Connect 2018.1 through 2018.4.1.7 Developer Portal's user registration page does not disable password autocomplete. An attacker with access to the browser instance and local system credentials can steal the credentials used for registration. IBM X-Force ID: 163453...