2 matches found
MAL-2025-185345 Malicious code in unise-kit-bograipda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5739dbf6f09424dae39af8e4922e2b853a58bc797688e506911932220a3af97f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Parse Server has an OAuth login vulnerability
Impact The 3rd party authentication handling of Parse Server allows the authentication credentials of some specific authentication providers to be used across multiple Parse Server apps. For example, if a user signed up using the same authentication provider in two unrelated Parse Server apps, th...