Malicious Package

Overview follow-ebay is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview core-site-speed-ebay is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

SketchSVG 代码注入漏洞

eBay SketchSVG is eBay's tool for extracting icons from Sketch files and compressing them into SVGs. A security vulnerability exists in SketchSVG that stems from vulnerability to arbitrary code injection when shell.exec is called...

WordPress WP eBay Product Feeds Plugin <= 3.3.1 is vulnerable to Cross Site Scripting (XSS)

Software WP eBay Product Feeds Type Plugin Vulnerable versions = 3.3.1 Fixed in 3.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23722 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 951d668c8f74 Credits yuyudhn Required...

Cyberstalking, pig masks, and cockroaches: Former eBay execs are sentenced

The former Senior Director of Safety & Security at eBay, and the companys former Director of Global Resiliency, have been sentenced to prison for their roles in a cyberstalking campaign. The targets of the campaign were the editor and publisher of a newsletter that eBay executives viewed as...

Malicious code in metrics-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 444d75d1e9415004ef5f95cbd2adcb09332c35ba4bae38c6d39b93a6f224226b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in security-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f34f022f6da3bc1dc777a1311e7aaddde9d442e08bc13025aac5639f6695280 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in commons-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fca6c21af828f60fe97221a1964dd96fdfa94550187dd44fb09f7201f4d34f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in service-client-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81133afd96840f03b4b34fcc3f650cf01fa899ee95fac5471d1b540947833c58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sso-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7469ad8fd2e8d9261c8ff5f66e095f51b7a1e9334c4de88f2cb86cb5f91a4af4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6284 Malicious code in sso-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7469ad8fd2e8d9261c8ff5f66e095f51b7a1e9334c4de88f2cb86cb5f91a4af4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4577 Malicious code in metrics-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 444d75d1e9415004ef5f95cbd2adcb09332c35ba4bae38c6d39b93a6f224226b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2127 Malicious code in commons-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fca6c21af828f60fe97221a1964dd96fdfa94550187dd44fb09f7201f4d34f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6030 Malicious code in service-client-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81133afd96840f03b4b34fcc3f650cf01fa899ee95fac5471d1b540947833c58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5994 Malicious code in security-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f34f022f6da3bc1dc777a1311e7aaddde9d442e08bc13025aac5639f6695280 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cookies-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4224e4b52b4dc82f0a72b5956c5d3dc6c0b7d269000aaadca3492fd9aa475a88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in legacy-client-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 878c3ad3b0ac62461718d675a1ce66d1d69b78b09adea752d911fe52a55cca39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fire-marshal-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e514b2c29f7d622b664e41906ff14ed0ef411f12cd5feaca7177f2bb280fcb32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4275 Malicious code in legacy-client-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 878c3ad3b0ac62461718d675a1ce66d1d69b78b09adea752d911fe52a55cca39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in brogan-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 142de0f01ce74f3ba2a163121986af8504eb87ba0f598ca801d4a5144f4809b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...