Scrapy before 2.6.2 and 1.8.3 vulnerable to one proxy sending credentials to another

Impact When the built-in HTTP proxy downloader middleware processes a request with proxy metadata, and that proxy metadata includes proxy credentials, the built-in HTTP proxy downloader middleware sets the Proxy-Authentication header, but only if that header is not already set. There are...

GHSA-9X8M-2XPF-CRP3 Scrapy before 2.6.2 and 1.8.3 vulnerable to one proxy sending credentials to another

Impact When the built-in HTTP proxy downloader middleware processes a request with proxy metadata, and that proxy metadata includes proxy credentials, the built-in HTTP proxy downloader middleware sets the Proxy-Authentication header, but only if that header is not already set. There are...

Malicious code in flipper-server-companion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cc36f67e47eed26c8e683c17a848cb0f05ac8d340c8720e2f0e23fbf1d594bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in matchmaking-mgmt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c910a63d38276abfbb266c3402f67f82df0091bd11ccffd6316793b44c5506a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

py-Scrapy -- credentials leak vulnerability

When the built-in HTTP proxy downloader middleware processes a request with proxy metadata, and that proxy metadata includes proxy credentials, the built-in HTTP proxy downloader middleware sets the Proxy-Authentication header, but only if that header is not already set. There are third-party...

MAL-2022-3961 Malicious code in ishakti (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5baf2140d42b6e398438a4b9316eeda0093e1acb810a3c3fa0acdc89ff979dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6171 Malicious code in small-sm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c67e4fe96a55da52f6b368337e2060c28fb5f2f5fbe19af21e66d4efe885d03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4298 Malicious code in lib-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 459880c4c4101dee13b2b38e89cc6c814a4bfd2a354774da5082b185b3478e08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3080 Malicious code in floureeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ee8cbffe126cf35dfa1679f96c925f2824d3453935d7a9cc0ec2bae8f45cb67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6511 Malicious code in testdorime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81419805eda3b6d8b6f339fb7919d9e066fe5bbbea95666b851ce53bac820fc5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in design-insights (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 939b31c8e77308691486e2c471ef67e7ba1acc3fc7c3fcccd4355b1901424326 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6726 Malicious code in uber-images (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9dd8d0258403cf035485142912d4cab1fa8404aa0ecadcef51cec2c48994ce27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6727 Malicious code in uber-unify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21e225a3970b7b05148665407d43149de0796a652a40af4f9cb8dfeb3898b82f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5597 Malicious code in razer-xdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 540be53be94e75262dc95e2abd0261bd691952d1b5efe267b276014d071217e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5138 Malicious code in ot-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dad5cdded9388aee82059159f70f7d7e584e0660a0fc7659619289333b14fb70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2230 Malicious code in create-ot-express-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 269d815f0f72dcbee5d8320d8fdc6dfb67256e41db6c462544a0fb234cfbf97c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5139 Malicious code in ot-menu-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4719e9ae5efca357fd891b2be9fde0c17cd90faa6c67a1c4955e7e1f811cfe29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stringjs_lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 408657b4589508928485b1c6cb47eb32fe5964986aaa380196f80f7792356f1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6326 Malicious code in stringjs_lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 408657b4589508928485b1c6cb47eb32fe5964986aaa380196f80f7792356f1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4702 Malicious code in mozi-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d2e2bc045cb40979fef13d9b9815cec571cd4b48e9ea09cbf972b7d2b5b07b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...