Malicious Package

Overview tiaa-web-ui-core is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Malicious code in tiaa-web-ui-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6307bc57608579648ccf1b24d5afbcd0d7f3c15e8c8da97a2a0d1a6a6e059fa9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-888 Malicious code in tiaa-web-ui-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6307bc57608579648ccf1b24d5afbcd0d7f3c15e8c8da97a2a0d1a6a6e059fa9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

tiaa.org XSS vulnerability

Vulnerable URL: https://www.tiaa.org/public/search-results?qryStr=retr0%20%27%20autofocus%20onfocus%3Dconfirm%27OPENBUGBOUNTY%27%2F%2F Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 30878 VIP website status:| Ye...

Fixed XSS vulnerability at www.tiaa-cref.org

Security researcher holisticinfosec, has submitted on 16/11/2008 a cross-site-scripting XSS vulnerability affecting www.tiaa-cref.org, which at the time of submission ranked 26622 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/01/2009. It i...