Lucene search
K

6 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/04/17 6:36 p.m.5 views

Malicious code in @indriver-poc/whisperwind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7543a4315d192afe241577899d5777567678b591c400103ba3da0dc46f1b1d55 The package @indriver-poc/whisperwind was found to contain malicious code. Source: ossf-package-analysis...

5.7AI score
Exploits0
OSV
OSV
added 2026/04/17 6:36 p.m.0 views

MAL-2026-2851 Malicious code in @indriver-poc/whisperwind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7543a4315d192afe241577899d5777567678b591c400103ba3da0dc46f1b1d55 The package @indriver-poc/whisperwind was found to contain malicious code. Source: ossf-package-analysis...

5.7AI score
Exploits0
OSV
OSV
added 2023/07/05 2:1 a.m.7 views

MAL-2023-522 Malicious code in indriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73bff59c1e33a90e2e3bb9dbc859b448452295291c7849432a362b44bdcbd4b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References3
Hacker One
Hacker One
added 2023/02/03 4:40 p.m.114 views

inDrive: inDriver Job - Admin Approval Bypass

A vulnerability was discovered in the "inDriver Job" application that allowed an attacker to bypass the admin approval process for publishing job offers. This vulnerability enabled the attacker to publish arbitrary content without undergoing the necessary moderation step...

7.1AI score
Exploits0
Hacker One
Hacker One
added 2022/11/23 4:1 p.m.11 views

inDrive: Disclosure of users' ip address whenever they view my fright offer on image preview (Without interaction)

A vulnerability was disclosed where users' IP addresses were leaked when they viewed freight offers, without any interaction required. By changing post image URLs to external sites, the external site received the user's IP when they viewed the post. This leaked user IPs and location, enabling...

7.2AI score
Exploits0
hackapp
hackapp
added 2017/01/09 3:35 p.m.22 views

inDriver - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application inDriver published at the 'play' market has multiple vulnerabilities...

1AI score
Exploits0References1Affected Software1
Rows per page
Query Builder