Malicious code in @tinkoff-react-bui/input-amount (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 994a0a8ffc92c84a5dead72060244e1408f9bdd16a86a402bdcd3e044bf7c29e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tinkoff-react-bui/svg-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf558b9a116b62aab931fcf875349acb6eb5f4171abaeac53c3fcdc8069f83b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-661 Malicious code in @tinkoff-react-bui/svg-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf558b9a116b62aab931fcf875349acb6eb5f4171abaeac53c3fcdc8069f83b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-656 Malicious code in @tinkoff-react-bui/input-amount (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 994a0a8ffc92c84a5dead72060244e1408f9bdd16a86a402bdcd3e044bf7c29e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tinkoff-react-bui/input-password (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a32c841225c2d1d24bb429b7cc5315b5420fd5ab2debcb91136b4bfe052eac06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-658 Malicious code in @tinkoff-react-bui/input-description (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5070a3552a3008edfafbc0b9e23cc7f301e2d10d548491f11466d7ab8a686c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tinkoff-react-bui/input-description (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5070a3552a3008edfafbc0b9e23cc7f301e2d10d548491f11466d7ab8a686c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tinkoff-react-bui/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24f7ab4d7d2586559c337934afd7370495bfad3915fbdc7ce528c06666a8101b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-662 Malicious code in @tinkoff-react-bui/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24f7ab4d7d2586559c337934afd7370495bfad3915fbdc7ce528c06666a8101b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-659 Malicious code in @tinkoff-react-bui/input-password (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a32c841225c2d1d24bb429b7cc5315b5420fd5ab2debcb91136b4bfe052eac06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Career Navigator talk for IT Hub College

Last week I gave a "Career Navigator" talk for the students of the IT Hub College in Moscow. By the way, this college has a very interesting practical information security program. If it is relevant for you, check it out. Ive never talked so much about myself in public. It was like giving advises...

Vulnerability Management at Tinkoff Fintech School

In the last three weeks, I participated in Tinkoff Fintech School - educational program for university students. Together with my colleagues, we prepared a three-month practical Information Security course: 1 lecture per week with tests and home tasks. Each lecture is given by a member of our...

securepay.tinkoff.ru XSS vulnerability

Open Bug Bounty ID: OBB-322554 Description| Value ---|--- Affected Website:| securepay.tinkoff.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Tinkoff - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Tinkoff published at the 'play' market has multiple vulnerabilities...

Тинькофф Бизнес - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Тинькофф Бизнес published at the 'play' market has multiple vulnerabilities...

Tinkoff Mobile Wallet - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Tinkoff Mobile Wallet published at the 'play' market has multiple vulnerabilities...