Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
•added 2023/09/06 9:29 a.m.•2 views

Malware in @grabdefence/trust-feature-bank-ui

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/09/05 5:45 a.m.•8 views

Malicious code in @grabdefence/trust-feature-bank-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfec11e2fa47a7b42d7e359d1dc08305ca989ded929ed38507f02f3d74df3a93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
OSV
OSV
•added 2023/09/05 5:45 a.m.•27 views

MAL-2023-8043 Malicious code in @grabdefence/trust-feature-bank-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfec11e2fa47a7b42d7e359d1dc08305ca989ded929ed38507f02f3d74df3a93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2023/07/06 7:24 p.m.•47 views

snyk Code Injection vulnerability

The package snyk before 1.1064.0 is vulnerable to Code Injection when analyzing a project. An attacker who can convince a user to scan a malicious project can include commands in a build file such as build.gradle or gradle-wrapper.jar, which will be executed with the privileges of the application...

8.8CVSS7.4AI score0.0076EPSS
SaveExploits1References9Affected Software1
Prion
Prion
•added 2022/11/30 1:15 p.m.•39 views

Code injection

The package snyk before 1.1064.0 are vulnerable to Code Injection when analyzing a project. An attacker who can convince a user to scan a malicious project can include commands in a build file such as build.gradle or gradle-wrapper.jar, which will be executed with the privileges of the applicatio...

6.8CVSS7.1AI score0.0076EPSS
SaveExploits2References7Affected Software3
OSV
OSV
•added 2022/11/30 12:00 a.m.•43 views

CVE-2022-24441 Code Injection

The package snyk before 1.1064.0 are vulnerable to Code Injection when analyzing a project. An attacker who can convince a user to scan a malicious project can include commands in a build file such as build.gradle or gradle-wrapper.jar, which will be executed with the privileges of the applicatio...

5.8CVSS7.1AI score
SaveExploits0References9
Rows per page
Query Builder