Malware in @spgy/eslint-plugin-spgy-fe

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

fe-wo.at Cross Site Scripting vulnerability OBB-3693472

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious Package

Overview picket-fe-bundler is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

MAL-2023-668 Malicious code in paysafe-wac-web-chatbot-lib-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 607c4692c6a631f5514a914240622977d22fb3fbc467f6bdc0b132532b3454b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-435 Malicious code in fe-core-components-vuejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d60e569c72a226b7f460fd4ee1792523d0c53a9206b27aef9a6d2774378754ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fe-core-components-vuejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d60e569c72a226b7f460fd4ee1792523d0c53a9206b27aef9a6d2774378754ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

fe-univ45sby.ac.id Cross Site Scripting vulnerability OBB-3037080

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

fe-ol.com Cross Site Scripting vulnerability OBB-2976432

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious Package

Overview fe-extension is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

FE File Explorer 11.0.4 Local File Inclusion Exploit

Exploit Title: FE File Explorer 11.0.4 Local File inclusion Exploit Author: Chokri Hammedi Vendor Homepage: https://www.skyjos.com/ Software Link: https://apps.apple.com/us/app/fe-file-explorer-file-manager/id510282524 Version: 11.0.4 Tested on: iPhone ios 15.6 from ftplib import FTP import...

Malicious Package

Overview fe-core-components is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

fe-univ45sby.ac.id Cross Site Scripting vulnerability OBB-2807924

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

catalog.santafelibrary.org Cross Site Scripting vulnerability OBB-2702445

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2022-2988 Malicious code in fe-cookie-consent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f2c513c35080103e2d423a511093c9dc6f961970fde756672902fb81965d8c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3723 Malicious code in huobi-bs-fe-scaffold (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bac5154dea0a0982316b2a0d54d6df43f25cd76daacac6d47c2b7a3bee9e0f4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fe-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d39b8452b6601a0290b2602c159aa5fbf2eccc43690b1527ab86dab56c6a6ae8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2991 Malicious code in fe-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d39b8452b6601a0290b2602c159aa5fbf2eccc43690b1527ab86dab56c6a6ae8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-fe-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb0b941f4da2748bca11ee138e4c299dd3179986c423c19f5f1fcee43afa5941 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5646 Malicious code in react-fe-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb0b941f4da2748bca11ee138e4c299dd3179986c423c19f5f1fcee43afa5941 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fe-datalayer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8575029c8170302c57286bcf94e6258c9dd4ece53a9482f3d22b465d90993ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...