requestDeposit and requestRedeem do not allow for any price guarantee, opening users to sandwich attacks and other losses

Lines of code Vulnerability details Impact Request functions take only the desired input amount as a parameter, giving no way for the caller to control the fulfilment price. The price is decided by the Centrifuge mainnet only. function requestDeposituint256 assets, address owner; function...

Malicious code in mmolecule-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cd75dfd6fa092015612a7f926c3e00d1c329aae61bb248d16f548202fd68801 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dcdemo-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 050cac6602978cf16969b08af722b2632273f6a067edfed937e3bb3d08343758 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in docker-slim-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c43f388e17851e78ffe6cea282489130b04ea50c71f40d951e492b3128f019d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7918 Malicious code in cms-datocms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fac9800b3ed890acb1273186fb6afc84b6334fe3867bb6aa084305adc3310976 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1023 Malicious code in test-hacker-sharma (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e719660cef7a5f238345da6413201c023f88d40596fc85983cf0489e0d68fb9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-rhancis-pogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3398b30916ed54737b0f733b7dc0b100065a9059a19ffc24e45ad9690d6d85a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fr-config-packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a3e96cb06aafc753b8adb69cabd8145c6125d89151ff1556f3685e0a99e9e84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Steam Community turn up the level Exploit

You can infinitely raise your level 2 levels per second, our profile in https://steamcommunity.com/id/St4ck/ Recommended to run the exploit once a day for 3 hours in order not to get banned. After purchase, you will receive instructions and a guarantee for the material...

Malicious code in fc-keep-alive (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 367d61b371f78d311258a9310bdaf603198ee29c664779d5fc9777c75b51e4ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Rage quitting availability cannot be reliably guaranteed

Lines of code Vulnerability details Impact The host can block specific rage quits, invalidating some of the security offered by the rage quit functionality. Proof of Concept Rage quitting is only allowed before rageQuitTimestamp or if permanently enabled: // Check if ragequit is allowed. uint40...

Malicious code in the-viscount-who-loved-me-bridgertons-2-by-julia-quinn-on-textbook-full-version- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e7b153ef20ba3f63ff092349f9d43f0b61281ee9f6b97ecaf99f90868c6871b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prisoners-of-geography-ten-maps-that-explain-everything-about-the-world-by-tim-marshall-on-iphone-fu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 154bcf7ce0ea7f54cfa32c942d23572613f0e0e707ad9bd85721e498412fa445 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dow-load-you-are-a-badass-at-making-money-master-the-mindset-of-wealth-by-jen-sincero-on-m (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b2fcfdd3a4f9e22933771484cf05fad36b8cb68479a3d060eb3292319a824a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in visual_studio_1_37_1_crack_top_activation_key_latest_2019_win_mac__2rl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa12c2f3e98ca483e099080fd151588bbeb94ca891e6a4bd70bcb301dc5d77cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in der_zahlenteufel_enzensberger_pdf_free_hot__760 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f6a62f3125320f39115c74c9e81c5d4910fd823043cac3404d56b551a8fef18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kitab_ta_lim_muta_alim_pdf_link__4i (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60a40d204dbd87863ee11fc8db5c5be0bd0ccb3f50efa0488c9de69e368e9e90 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in animoto_full_version_portable_crack_rt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a2fb41229dbad8b492edfdbfb07c17b9bce5f61a6a00ae57d5483d13210b06d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-670 Malicious code in pcorbr-ui-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42c2ab222c8542659c5bf7b3e2daeea4be95818c1e0d0c186b7bce8abfa462a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodebb-plugin-sso-auto-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf3ab1b77199e67562a75d535a0d6c88f5d8d4c76b8df6d226e9528b0e050006 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...