Malicious Package

Overview @kibt/operation-track is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious code in aws-track-and-trace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d989d00b9eaf887318066983a92806b286fb32f6a58adf315ab01e8bebed6902 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1204 Malicious code in aws-track-and-trace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d989d00b9eaf887318066983a92806b286fb32f6a58adf315ab01e8bebed6902 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-service-bus-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79e8b972ae7ebe47ad31a4cfed964bf1308b4d910ddad0f713ef7e45af26dc43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-storage-file-share-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea0ff6e1544a452407d2b6c971abab8ad445cfc1c60561a46398601578a271e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-event-hubs-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 901e8d431555966b24b8ed74e06874a38cfa5e96801221b937aec31605cba141 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5283 Malicious code in perf-event-hubs-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 901e8d431555966b24b8ed74e06874a38cfa5e96801221b937aec31605cba141 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5297 Malicious code in perf-storage-file-share-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea0ff6e1544a452407d2b6c971abab8ad445cfc1c60561a46398601578a271e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-storage-blob-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 567e0f79387c321ef5292bc42ca46151d74d37f8f9a468ccbb20d3a267dceca1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5294 Malicious code in perf-storage-blob-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 567e0f79387c321ef5292bc42ca46151d74d37f8f9a468ccbb20d3a267dceca1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6026 Malicious code in service-bus-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8547c44f06dfc6fb52916c87e2955905a476cec2262b8d6c20a8930f3994712d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in service-bus-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8547c44f06dfc6fb52916c87e2955905a476cec2262b8d6c20a8930f3994712d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in event-hubs-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76ed4e10f86b7bc93830d7dc683beeb8f4e77bd96e26d087a83a50b8c81b4caf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in storage-file-share-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7120b7a5dde3b0d526b62436e0943de69e9f1cb19237210975b085341c466430 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2892 Malicious code in event-hubs-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76ed4e10f86b7bc93830d7dc683beeb8f4e77bd96e26d087a83a50b8c81b4caf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in storage-blob-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3607a0554a0463b3991dbaa481801aa5e3519da54506a5967664c934d0d6836 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @azure-tests/perf-service-bus-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5e70f370bad16f5c5f3b53ac78af981f9d14f1ebb6551b8bd8fda11f91a5171 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

stored xss

Description Stored XSS, also known as persistent XSS, is the more damaging than non-persistent XSS. It occurs when a malicious script is injected directly into a vulnerable web application. Proof of Concept 1Go to this website: https://titra.io/ 2Click on add Track button 3In the Task field enter...

Stored XSS in Task field

Description The application Titra is vulnerable to Stored XSS in Task field. Steps To Reproduce 1. Click on add Track button 2. In the Task field enter the payload " 3. click save 4. Now Click on Details 5. XSS will be triggered Image PoC...

MAL-2022-1362 Malicious code in azure-pipelines-dependency-track (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d8de0a03478a809b8f29b605fa046f7b89e682904f1dbfb3321aa9e64df94f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...