MAL-2022-208 Malicious code in @drive2/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 901afee90f9b5e579c7deb26fb72c34e8b8ef47e97afc36dfaa081ac133ff088 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @drive2/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 901afee90f9b5e579c7deb26fb72c34e8b8ef47e97afc36dfaa081ac133ff088 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DRIVE.NET, Inc.: [www.drive2.ru] CSRF through FCTX token bypass

During login on the login page, login is attempted through the FCTX token. In addition, the login page was implemented through g-recaptcha-response captcha, but an attacker can bypass g-recaptcha-response captcha without FCTX tokens, and login CSRF is possible. The issue was fixed by enabling the...