MAL-2023-208 Malicious code in core-site-speed-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1583a2587d4a117d6dc59133fd52c7c8da04f57cd6265a159e8c50da5e82d8bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in follow-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cc58a7a39a3da5508a2d0e86e8a9b92384514b331afbb923e6d20295b6c0f65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview follow-ebay is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview core-site-speed-ebay is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

SketchSVG code injection vulnerability

eBay SketchSVG is eBay's tool for extracting icons from Sketch files and compressing them into SVGs. A security vulnerability exists in SketchSVG that stems from vulnerability to arbitrary code injection when shell.exec is called...

WordPress WP eBay Product Feeds Plugin <= 3.3.1 is vulnerable to Cross Site Scripting (XSS)

Software WP eBay Product Feeds Type Plugin Vulnerable versions = 3.3.1 Fixed in 3.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23722 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 951d668c8f74 Credits yuyudhn Required...

Cyberstalking, pig masks, and cockroaches: Former eBay execs are sentenced

The former Senior Director of Safety & Security at eBay, and the companys former Director of Global Resiliency, have been sentenced to prison for their roles in a cyberstalking campaign. The targets of the campaign were the editor and publisher of a newsletter that eBay executives viewed as...

MAL-2022-4577 Malicious code in metrics-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 444d75d1e9415004ef5f95cbd2adcb09332c35ba4bae38c6d39b93a6f224226b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in service-client-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81133afd96840f03b4b34fcc3f650cf01fa899ee95fac5471d1b540947833c58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sso-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7469ad8fd2e8d9261c8ff5f66e095f51b7a1e9334c4de88f2cb86cb5f91a4af4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in commons-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fca6c21af828f60fe97221a1964dd96fdfa94550187dd44fb09f7201f4d34f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in security-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f34f022f6da3bc1dc777a1311e7aaddde9d442e08bc13025aac5639f6695280 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6030 Malicious code in service-client-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81133afd96840f03b4b34fcc3f650cf01fa899ee95fac5471d1b540947833c58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in metrics-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 444d75d1e9415004ef5f95cbd2adcb09332c35ba4bae38c6d39b93a6f224226b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6284 Malicious code in sso-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7469ad8fd2e8d9261c8ff5f66e095f51b7a1e9334c4de88f2cb86cb5f91a4af4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5994 Malicious code in security-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f34f022f6da3bc1dc777a1311e7aaddde9d442e08bc13025aac5639f6695280 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2127 Malicious code in commons-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fca6c21af828f60fe97221a1964dd96fdfa94550187dd44fb09f7201f4d34f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2179 Malicious code in cookies-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4224e4b52b4dc82f0a72b5956c5d3dc6c0b7d269000aaadca3492fd9aa475a88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4275 Malicious code in legacy-client-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 878c3ad3b0ac62461718d675a1ce66d1d69b78b09adea752d911fe52a55cca39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3276 Malicious code in gatekeeper-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fccddd88d3d49ba86c9c5d9921f46d6e335d4394bb3f28e7510e3ff32a51b946 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...