Malicious code in virtual-npm-lyft (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37b3046c501951ee4d7cfe4a8eeb3d8fcf82846303f85b82614244910a83a6cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6942 Malicious code in virtual-npm-lyft (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37b3046c501951ee4d7cfe4a8eeb3d8fcf82846303f85b82614244910a83a6cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lyft-service-plugin-service-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11cae99f45bda0d06253e5365230657a357f371ef6c198cd92758d6f960e8a55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4437 Malicious code in lyft-service-plugin-service-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11cae99f45bda0d06253e5365230657a357f371ef6c198cd92758d6f960e8a55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4434 Malicious code in lyft-avidl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92c67e222159270b34173f0d8fdd80261b45d22a9baeb4f1744bb0366c55df41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lyft-avidl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92c67e222159270b34173f0d8fdd80261b45d22a9baeb4f1744bb0366c55df41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Code Bombs Target Amazon, Lyft, Slack, Zillow

Researchers have spotted malicious packages targeting internal applications for Amazon, Lyft, Slack and Zillow among others inside the npm public code repository — all of which exfiltrate sensitive information. The packages weaponize a proof-of-concept PoC code dependency-confusion exploit that w...

PT-2020-14207 · Lyft +1 · Envoy +1

Content removed...

Lyft - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Lyft published at the 'play' market has multiple vulnerabilities...