EUVD-2021-8705

Malicious code in bioql PyPI...

Malicious code in vscode-stripe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1d0c32db564ed63889f6b2cbab203b6f3cf1d7b3a76bdc5c32e8637ba4e8a62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6978 Malicious code in vscode-stripe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1d0c32db564ed63889f6b2cbab203b6f3cf1d7b3a76bdc5c32e8637ba4e8a62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Code injection

vscode-stripe is an extension for Visual Studio Code. A vulnerability in Stripe for Visual Studio Code extension exists when it loads an untrusted source-code repository containing malicious settings. An attacker who successfully exploited the vulnerability could run arbitrary code in the context...