MAL-2024-948 Malicious code in identity-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 172d924c44b4cff292645cf014382ea4d780ad62b2d7550d53d4825c83ac271f The OpenSSF Package Analysis project identified 'identity-auth' @ 10.999.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in identity-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 172d924c44b4cff292645cf014382ea4d780ad62b2d7550d53d4825c83ac271f The OpenSSF Package Analysis project identified 'identity-auth' @ 10.999.0 npm as malicious. It is considered malicious because: - The package...

The vulnerability of the `browser identity.launchWebAuthFlow` function in Mozilla Firefox’s WebExtensions extensions allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the browser identity.launchWebAuthFlow function in Mozilla Firefox’s WebExtensions extensions is related to the improper loading of content via HTTPS. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...