Malicious code in google-admin (npm)

Source: ossf-package-analysis 1952eda028c50037c3fed98b8477d4d246352476b02989dc4f37d710842bd120 The OpenSSF Package Analysis project identified 'google-admin' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...

MAL-2025-478 Malicious code in google-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1952eda028c50037c3fed98b8477d4d246352476b02989dc4f37d710842bd120 The OpenSSF Package Analysis project identified 'google-admin' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in google-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1952eda028c50037c3fed98b8477d4d246352476b02989dc4f37d710842bd120 The OpenSSF Package Analysis project identified 'google-admin' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Service Continuity doesn't work on CWA ChromeOS version 2312 or older

Service Continuity doesn’t work when using Citrix Workspace App for ChromeOS version 2312 or older. The Service Continuity banner doesn’t show up in case of Cloud outages on Citrix Workspace App for Chrome OS. This occurs even when Service Continuity is enabled via Google Admin Console for the...

Info-stealers can steal cookies for permanent access to your Google account

Hackers have found a way to gain unauthorized access to Google accounts, bypassing any multi-factor authentication MFA the user may have set up. To do this they steal authentication cookies and then extend their lifespan. It doesn’t even help if the owner of the account changes their password...

New SH1MMER Exploit for Chromebook Unenrolls Managed ChromeOS Devices

A new exploit has been devised to "unenroll" enterprise- or school-managed Chromebooks from administrative control. Enrolling ChromeOS devices makes it possible to enforce device policies as set by the organization via the Google Admin console, including the features that are available to users...

How To Configure Single Sign-on for Receiver for ChromeOS

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Citrix Receiver for Chrome now supports single sign-on SSON on Chromebook devices and Citrix Virtual...

Google Admin WebView Sandbox Bypass Vulnerability

An issue was found when the Google Admin application received a URL via an IPC call from any other application on the same device. The Admin application would load this URL in a webview within its own activity. If an attacker used a file:// URL to a file that they controlled, then it is possible ...

Android System Google Admin app exposed 0day vulnerabilities, can bypass the sandbox-vulnerability warning-the black bar safety net

MWR Labs researchers discovered a 0day vulnerability exists in the Android system of the Google Admin app to handle some URL in the way that, by the vulnerability the attacker can bypass the Android sandbox mechanism. The vulnerability principle For the Google Android security team, this month is...