Post Action Report: Bad Firewall Rule Released to WPEngine Customers Wednesday

On Wednesday afternoon a small percentage of WPEngine websites using a paid version of Wordfence experienced a 500 Internal Server Error or white screen on their sites due to an erroneous firewall rule that we released. If you have experienced this issue, please check your email which contains...

MAL-2023-860 Malicious code in testpackyeaaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c5b13be95f557fcc861cb88bec3bc7822081d2b58481fc426ad0d80583e85ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-780 Malicious code in smarttv-screen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c1206c11f41ef711a2a427150a0c5529e775123fa6d441e320f324388924604 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-246 Malicious code in deskpro-notifications-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9e07cbfe7dbcfbce0bd86d7353862570a270265a771f2ed1da61bb8ddf101b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress YourChannel: Everything you want in a YouTube Plugin <= 1.2.3 is vulnerable to Broken Access Control

Software YourChannel: Everything you want in a YouTube Type Plugin Vulnerable versions = 1.2.3 Fixed in 1.2.4 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-1868 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID b65addd676af Credit...

MAL-2023-159 Malicious code in capfb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 266decd2f38301f7ec288850e068420e62cd39a10c8de6f6923d19e19c61a652 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-553 Malicious code in kemnasa-sp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11e53e1596af827447edef4919e4a6f003dcb35cfd0e674d6062c2a626982249 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-20 Malicious code in @12build/account-api-ts-axios-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc5c5465a393a23f776128754b0543c03787f78e563b7142645453e912068ff6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-736 Malicious code in react-sports-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4dc4fa4bf228c9c09ee80e076570ba795f4bbf16efab3df7655ef3c27fa9993 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-836 Malicious code in tdv2-applet-monalixa.store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c1d448a144690b4cb560c6addca919072d44b799f174ae3bcc148bb25a81308 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-292 Malicious code in ds-ember-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32eba44302a74869a67c73b03d739a2f3e06ac76700e85bf314ed9bbe4efe7e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-832 Malicious code in td-app-finance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf37f106766555425d4a6579374a74778e61776dcdff333df9129a109b4a82d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-855 Malicious code in testing-dummy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 134e6deeec000537eb2ce8b8c8f531fc97c037638ba5d40ae80e0231861cc595 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-923 Malicious code in usaa-input-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8473436367d09c53aaf17637b278bfba50b5d72473cb36c7a01e7029216463d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-924 Malicious code in usaa-select (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1a0a2b3751f6688b7b93ed4f71fc77b99863442191da95fcd67f8555fe4a8e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-70 Malicious code in @xivart/edge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcb95a25deef3591688d4a45aae9289dfd64c78764655b2ba9af3563d2911143 Invalid Advisory This advisory has been withdrawn as the ownership has been transferred to a valid owner organization. This link is maintained to preserv...

MAL-2023-72 Malicious code in @xivart/tangram (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22eab2391271310f3fabe0ef281b8836362a13240184bafe5326e81659a8953f Invalid Advisory This advisory has been withdrawn as the ownership has been transferred to a valid owner organization. This link is maintained to preserv...

MAL-2023-196 Malicious code in cms-ui-views (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 636cafa99151c70813b92018c04a866bf889ce49006e1f029efa7f5facd17639 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-188 Malicious code in cms-external-datajs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8773c9cce6f243b82d0713bb1f4a922d2e1350f7312b64f3c46696e984b2057d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-181 Malicious code in clientcore-models-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de4f8608c64c0d2d06f8bf729f6b9a52295b62d6a69f5da36891c2fbe883b2e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...