MAL-2022-3278 Malicious code in gatsby-pancake-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90ceffb30b37291bb6ed204298f0beeb2f64c2ea30997c21d3c63501f9c1f5e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gatsby-pancake-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90ceffb30b37291bb6ed204298f0beeb2f64c2ea30997c21d3c63501f9c1f5e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5205 Malicious code in pancake_uniswap_validators_utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07f34b82556bcb804369bc6e0306a07a2682db655d115596f860b7eb29a461f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pancake_sign (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5368e2859faabf7322b6d37857c56da68fb65070892d162578f54598c16a5669 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pancake-cake-vault (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4911af300b562bcf8849d8ac6a0764e01ecb653a7f3bc39955b489a5ce1efd89 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5201 Malicious code in pancake-cake-vault (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4911af300b562bcf8849d8ac6a0764e01ecb653a7f3bc39955b489a5ce1efd89 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2020-24876

Use of a hard-coded cryptographic key in Pancake versions 4.13.29 allows an attacker to forge session cookies, which may lead to remote privilege escalation...

CVE-2020-24876

Use of a hard-coded cryptographic key in Pancake versions 4.13.29 allows an attacker to forge session cookies, which may lead to remote privilege escalation...

Hardcoded credentials

Use of a hard-coded cryptographic key in Pancake versions 4.13.29 allows an attacker to forge session cookies, which may lead to remote privilege escalation...

CVE-2020-24876

Use of a hard-coded cryptographic key in Pancake versions 4.13.29 allows an attacker to forge session cookies, which may lead to remote privilege escalation...

CVE-2020-24876

CVE-2020-24876 affects Pancake prior to version 4.13.29, where a hard-coded cryptographic key can be used to forge session cookies. According to multiple sources (NVD entry and Red Hat advisory), this enables remote privilege escalation by forging authenticated sessions. The vulnerability stems f...

Pancake recipes - Base64 encoded String, Exported ContentProvider, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Pancake recipes published at the 'play' market has multiple vulnerabilities...