113 matches found
Malicious code in espn-react-oneid (npm)
Source: ossf-package-analysis 4692f32d575cbdbf797aea5aabd0d50c4015884bfac1ce7b40006443bd8759f6 The OpenSSF Package Analysis project identified 'espn-react-oneid' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...
Malicious code in @espn-ping/react-dmed-oauth (npm)
Source: amazon-inspector 3bc0467ac62043cf22dd249a99ff1279646dc599702140998ff5b86c79645364 @espn-ping/[email protected] declares a preinstall lifecycle script node index.js /dev/null 2&1 that automatically executes on npm install. index.js shells out via childprocess.exec to collect the...
Malicious code in @espn-ping/react-dmed-oauth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc0467ac62043cf22dd249a99ff1279646dc599702140998ff5b86c79645364 @espn-ping/[email protected] declares a preinstall lifecycle script node index.js /dev/null 2&1 that automatically executes on npm install...
MAL-2026-10401 Malicious code in @espn-ping/react-dmed-oauth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc0467ac62043cf22dd249a99ff1279646dc599702140998ff5b86c79645364 @espn-ping/[email protected] declares a preinstall lifecycle script node index.js /dev/null 2&1 that automatically executes on npm install...
MAL-2024-1129 Malicious code in espn-react-oneid (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4692f32d575cbdbf797aea5aabd0d50c4015884bfac1ce7b40006443bd8759f6 The OpenSSF Package Analysis project identified 'espn-react-oneid' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in espn-react-oneid (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4692f32d575cbdbf797aea5aabd0d50c4015884bfac1ce7b40006443bd8759f6 The OpenSSF Package Analysis project identified 'espn-react-oneid' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Associated Press, ESPN, CBS among top sites serving fake virus alerts
ScamClub is a threat actor whos been involved in malvertising activities since 2018. Chances are you probably ran into one of their online scams on your mobile device. Confiant, the firm that has tracked ScamClub for years, released a comprehensive report in September while also disrupting their...
MAL-2022-2852 Malicious code in espn-critical (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c474e2370da6b06c90e151e8bde6e4b3e0f0e06d75f6b0f0bd2919f0b9aaf675 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in espn-lazysizes
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2022-2853 Malicious code in espn-lazysizes (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60130f7b2b231061cc46a7cd1f6e01e416c6eaa83410e500788fd34809d817e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in espn-critical (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c474e2370da6b06c90e151e8bde6e4b3e0f0e06d75f6b0f0bd2919f0b9aaf675 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in espn-lazysizes (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60130f7b2b231061cc46a7cd1f6e01e416c6eaa83410e500788fd34809d817e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in espn-critical
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2022-254 Malicious code in @espn-lazysizes/fetlife-assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e54f13287006cc46085a40aefef14b533bc8c03a746796ea46c41ea4b6249eb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in @espn/fetlife-assets
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2022-253 Malicious code in @espn/fetlife-assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c01b035156efe98723a341a81abfefda64ddf596c8456ae829ca3371eed8ba9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @espn/fetlife-assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c01b035156efe98723a341a81abfefda64ddf596c8456ae829ca3371eed8ba9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in @espn-lazysizes/fetlife-assets
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
espn.in Cross Site Scripting vulnerability OBB-2541763
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
espn.com.sg Cross Site Scripting vulnerability OBB-2338598
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...