MAL-2022-651 Malicious code in @tinkoff-react-bui/click-outside (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d6fd8d87a4337f42d814472a9379a3e44a7a9fa8d60e4957c396d580e0d85dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tinkoff-react-bui/context-menu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f239b4e149956ae7fcbe368e6040942fc96e8fd6a13a332a4c1e64cffb9747d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-657 Malicious code in @tinkoff-react-bui/input-amount-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1b086c983cecdbf1e8f97a2d60a171c07c328710ce3aad027dd2f891d2a01a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tinkoff-react-bui/modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 783802d9c19b708d0e12629ff6845be4364fa49987d67dacecdb6bc733d322b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-656 Malicious code in @tinkoff-react-bui/input-amount (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 994a0a8ffc92c84a5dead72060244e1408f9bdd16a86a402bdcd3e044bf7c29e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tinkoff-react-bui/svg-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf558b9a116b62aab931fcf875349acb6eb5f4171abaeac53c3fcdc8069f83b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-660 Malicious code in @tinkoff-react-bui/modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 783802d9c19b708d0e12629ff6845be4364fa49987d67dacecdb6bc733d322b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tinkoff-react-bui/input-amount (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 994a0a8ffc92c84a5dead72060244e1408f9bdd16a86a402bdcd3e044bf7c29e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-661 Malicious code in @tinkoff-react-bui/svg-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf558b9a116b62aab931fcf875349acb6eb5f4171abaeac53c3fcdc8069f83b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-658 Malicious code in @tinkoff-react-bui/input-description (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5070a3552a3008edfafbc0b9e23cc7f301e2d10d548491f11466d7ab8a686c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tinkoff-react-bui/input-description (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5070a3552a3008edfafbc0b9e23cc7f301e2d10d548491f11466d7ab8a686c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-662 Malicious code in @tinkoff-react-bui/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24f7ab4d7d2586559c337934afd7370495bfad3915fbdc7ce528c06666a8101b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-659 Malicious code in @tinkoff-react-bui/input-password (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a32c841225c2d1d24bb429b7cc5315b5420fd5ab2debcb91136b4bfe052eac06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tinkoff-react-bui/input-password (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a32c841225c2d1d24bb429b7cc5315b5420fd5ab2debcb91136b4bfe052eac06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tinkoff-react-bui/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24f7ab4d7d2586559c337934afd7370495bfad3915fbdc7ce528c06666a8101b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Career Navigator talk for IT Hub College

Last week I gave a "Career Navigator" talk for the students of the IT Hub College in Moscow. By the way, this college has a very interesting practical information security program. If it is relevant for you, check it out. Ive never talked so much about myself in public. It was like giving advises...

Vulnerability Management at Tinkoff Fintech School

In the last three weeks, I participated in Tinkoff Fintech School - educational program for university students. Together with my colleagues, we prepared a three-month practical Information Security course: 1 lecture per week with tests and home tasks. Each lecture is given by a member of our...

securepay.tinkoff.ru XSS vulnerability

Open Bug Bounty ID: OBB-322554 Description| Value ---|--- Affected Website:| securepay.tinkoff.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Tinkoff - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Tinkoff published at the 'play' market has multiple vulnerabilities...

Тинькофф Бизнес - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Тинькофф Бизнес published at the 'play' market has multiple vulnerabilities...