Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. An attacker using the npm account ehindero hijacked the @mastra npm organization and, in a roughly 30–45 minute burst starting around 01:12 UTC, republished the entire @mastra catalog. The Mastra source code was...

Beware of Fraudulent Sites, phishing for Twitter accounts

There's a scam spreading through Twitter Direct messages DMs and fake emails, appealing users to visit a fake twitter phishing site i.e "twittler.com". Scam uses a hijacked Twitter account to send out direct messages that appear completely legitimate. Security blogger, Janne Ahlberg blogged about...

Beware of Fraudulent Sites, phishing for Twitter accounts

There's a scam spreading through Twitter Direct messages DMs and fake emails, appealing users to visit a fake twitter phishing site i.e "twittler.com". Scam uses a hijacked Twitter account to send out direct messages that appear completely legitimate. Security blogger, Janne Ahlberg blogged about...

[Full-disclosure] Serendipity Freetag-plugin XSS vulnerability

Advisory: Serendipity Freetag-plugin XSS vulnerability Application: Serendipity Freetag-plugin = 2.95 Category: Web application Class: Cross Site Scripting XSS Release date: 08. February 2008 Last updated: 08. February 2008 Remote: Yes Local: No CVE: Not yet assigned Credits: Alexander Brachmann...