272 matches found
Malicious code in spotify-debug-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9edfda583c9114e1c2777cfff3dfac295df3fc155a65e3e1761a858e6dff9c2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in spotify-deferred (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2665986f80cacf7d64c6c00419b413a689365ff64f0eb34858060afdae10727 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6261 Malicious code in spotify-promise-plus (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de122999e6fc807384186ab9aeb6da6a2f5b6e6217255a527c23a60f8bb540c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6262 Malicious code in spotify-transport (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8e24e04ec9c9fa1918b8a0fe048dd7a7a8224e0f65a576271d007153e5b99f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6254 Malicious code in spotify-event-sender (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a225d38807bfd3867ba6c251cf5eb2a8597b4e96fd1f89928f9c6fd0293a261f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in spotify-crypto (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1924622c4e936e1676cb5803800916a405cdb3a596fb9f0c24f6ba3e90b06517 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6249 Malicious code in spotify-crypto (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1924622c4e936e1676cb5803800916a405cdb3a596fb9f0c24f6ba3e90b06517 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in spotify-b2b (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c539189f641ea8043f9015a8e6bd03168888b20ede254ae58a0b60886c0701f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6247 Malicious code in spotify-b2b (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c539189f641ea8043f9015a8e6bd03168888b20ede254ae58a0b60886c0701f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6260 Malicious code in spotify-playback (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5b571969d5440538db0bf7e7a9e055f152bee0b2f741e0f94ff3e4f92e881be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in spotify-playback (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5b571969d5440538db0bf7e7a9e055f152bee0b2f741e0f94ff3e4f92e881be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in spotify.github.io (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2acedfff82c3936e73a247f4f6957ede42be319f4bf98df2d997650d7a3e1144 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
A week in security (February 14 – February 20)
Last week on Malwarebytes Labs: Adobe patches actively exploited Magento/Adobe Commerce zero-day Ransomware gang hits 49ers’ network before Super Bowl kick off Don’t let scammers ruin your Valentine’s Day CISA Ransomware report warns “triple threat” attacks still on the prowl City: Skylines...
CVE-2021-40927
Cross-site scripting XSS vulnerability in callback.php in Spotify-for-Alfred 0.13.9 and below allows remote attackers to inject arbitrary web script or HTML via the error parameter...
CVE-2021-40927
Cross-site scripting XSS vulnerability in callback.php in Spotify-for-Alfred 0.13.9 and below allows remote attackers to inject arbitrary web script or HTML via the error parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in callback.php in Spotify-for-Alfred 0.13.9 and below allows remote attackers to inject arbitrary web script or HTML via the error parameter...
CVE-2021-40927
CVE-2021-40927 is an XSS vulnerability in the Spotify-for-Alfred project (callback.php) affecting version 0.13.9 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML via the error parameter. According to NVD metrics, the exploitability is network-based with medium ...
CVE-2021-40927
Cross-site scripting XSS vulnerability in callback.php in Spotify-for-Alfred 0.13.9 and below allows remote attackers to inject arbitrary web script or HTML via the error parameter...
Spotify-for-Alfred 跨站脚本漏洞
Spotify-For-Alfred Spotifious is an open source licensed streaming music service platform by Ben Stolovitz, an individual developer. A cross-site scripting vulnerability exists in Spotify-for-Alfred versions 0.13.9 and below, which allows remote attackers to inject arbitrary web script or HTML vi...
