Lucene search
+L

150 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/08/21 2:29 a.m.•10 views

Malicious code in usaa-qtest-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a04103c3f7b9d85cf20b6beb7a9d097048650f41a786c6ab1ef5d620132c27c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2023/08/21 2:29 a.m.•5 views

Malware in usaa-qtest-reporter

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2023/08/21 2:29 a.m.•19 views

MAL-2023-1531 Malicious code in usaa-qtest-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a04103c3f7b9d85cf20b6beb7a9d097048650f41a786c6ab1ef5d620132c27c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2023/08/21 2:27 a.m.•29 views

MAL-2023-1528 Malicious code in usaa-mock-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5984159a116b2da397135b921e07673806820b6693fa2e8e3695c1b4aef23de5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2023/08/21 2:27 a.m.•5 views

Malware in usaa-mock-server

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/08/21 2:27 a.m.•17 views

Malicious code in usaa-mock-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5984159a116b2da397135b921e07673806820b6693fa2e8e3695c1b4aef23de5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2023/08/21 2:25 a.m.•20 views

MAL-2023-1532 Malicious code in usaa-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35bce4289bb065eb9e1460adcc822a34e49647575381e636708872a124ddbf1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2023/08/21 2:25 a.m.•4 views

Malware in usaa-sass-loader

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/08/21 2:25 a.m.•10 views

Malicious code in usaa-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35bce4289bb065eb9e1460adcc822a34e49647575381e636708872a124ddbf1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/08/21 2:22 a.m.•11 views

Malicious code in browserslist-config-usaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f08f5ede6b0f56a4b6366c22c4622d7cddc43a2d689f021f8a179e72c2fa6220 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2023/08/21 2:22 a.m.•20 views

MAL-2023-1512 Malicious code in browserslist-config-usaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f08f5ede6b0f56a4b6366c22c4622d7cddc43a2d689f021f8a179e72c2fa6220 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2023/08/21 2:22 a.m.•3 views

Malware in browserslist-config-usaa

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/06/19 6:12 p.m.•12 views

Malicious code in usaa-combobox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e892dcf4e3ded1dbf0fcc40f606985a800f80c2d34bc734649a22cec7256fe4 The OpenSSF Package Analysis project identified 'usaa-combobox' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

6.9AI score
SaveExploits0
osv_mal
osv_mal
•added 2023/06/19 5:55 p.m.•12 views

MAL-2023-1331 Malicious code in usaa-pagination (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0d9fe4420ea18c84929d5f69ae4aee3195444c279f3e9a7653bf5e6b992723a The OpenSSF Package Analysis project identified 'usaa-pagination' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/06/19 5:55 p.m.•7 views

Malicious code in usaa-pagination (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0d9fe4420ea18c84929d5f69ae4aee3195444c279f3e9a7653bf5e6b992723a The OpenSSF Package Analysis project identified 'usaa-pagination' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

6.9AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/06/19 5:50 p.m.•9 views

Malicious code in usaa-cards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1487cc16acdec63072223cdd8fe5b4764fdd85ef995ed1650dc2c5eb5c9e4fbc The OpenSSF Package Analysis project identified 'usaa-cards' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

6.9AI score
SaveExploits0
osv_mal
osv_mal
•added 2023/06/19 5:50 p.m.•16 views

MAL-2023-1329 Malicious code in usaa-cards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1487cc16acdec63072223cdd8fe5b4764fdd85ef995ed1650dc2c5eb5c9e4fbc The OpenSSF Package Analysis project identified 'usaa-cards' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

7.1AI score
SaveExploits0
Snyk
Snyk
•added 2023/04/04 8:19 a.m.•6 views

Malicious Package

Overview usaa-textarea is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2023/04/04 8:19 a.m.•8 views

Malicious Package

Overview usaa-input-utils is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2023/03/28 8:19 a.m.•14 views

Malicious Package

Overview usaa-select is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

9.8CVSS7.1AI score
SaveExploits0References3
Rows per page
Query Builder