6 matches found
Malicious code in @indriver-poc/whisperwind (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7543a4315d192afe241577899d5777567678b591c400103ba3da0dc46f1b1d55 The package @indriver-poc/whisperwind was found to contain malicious code. Source: ossf-package-analysis...
MAL-2026-2851 Malicious code in @indriver-poc/whisperwind (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7543a4315d192afe241577899d5777567678b591c400103ba3da0dc46f1b1d55 The package @indriver-poc/whisperwind was found to contain malicious code. Source: ossf-package-analysis...
MAL-2023-522 Malicious code in indriver (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73bff59c1e33a90e2e3bb9dbc859b448452295291c7849432a362b44bdcbd4b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
inDrive: inDriver Job - Admin Approval Bypass
A vulnerability was discovered in the "inDriver Job" application that allowed an attacker to bypass the admin approval process for publishing job offers. This vulnerability enabled the attacker to publish arbitrary content without undergoing the necessary moderation step...
inDrive: Disclosure of users' ip address whenever they view my fright offer on image preview (Without interaction)
A vulnerability was disclosed where users' IP addresses were leaked when they viewed freight offers, without any interaction required. By changing post image URLs to external sites, the external site received the user's IP when they viewed the post. This leaked user IPs and location, enabling...
inDriver - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application inDriver published at the 'play' market has multiple vulnerabilities...