Malicious code in @mep-exp/api-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322089c1a58142401c82621aa778cdb7221086196cce6c879a703625b7013555 preinstall.js, registered as scripts.preinstall and also required from the main module and every bin entry, collects os.hostname, os.userInfo.usernam...

MAL-2026-6183 Malicious code in @mep-exp/api-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322089c1a58142401c82621aa778cdb7221086196cce6c879a703625b7013555 preinstall.js, registered as scripts.preinstall and also required from the main module and every bin entry, collects os.hostname, os.userInfo.usernam...

EUVD-2014-6610

Malware in sbrugna...

MAL-2024-1375 Malicious code in @westpac-components-web/hooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 935f3ecec4f48a905f04e98df7c4b7010c6fdc9900763c6aa3fe749e8ffd9237 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @westpac-components-web/hooks

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

westpac.com.au XSS vulnerability

Vulnerable URL: http://www.westpac.com.au/locateus/?searchInput="=branch Details: Description| Value ---|--- Patched:| Yes, at 07.12.2016 Latest check for patch:| 07.12.2016 07:59 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2611 Google Pagerank| 7 VIP websit...

CVE-2014-6732

The Westpac Mobile Banking aka org.westpac.bank application 5.21 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Westpac Mobile Banking aka org.westpac.bank application 5.21 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6732

The Westpac Mobile Banking aka org.westpac.bank application 5.21 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6732

The CVE-2014-6732 entry concerns the Westpac Mobile Banking Android app (version 5.21) that does not verify X.509 certificates when establishing SSL connections. This weakens server authentication and allows a man-in-the-middle to spoof SSL servers and capture sensitive information via a crafted ...

CVE-2014-6732: Undefined Security Weakness

The Westpac Mobile Banking aka org.westpac.bank application 5.21 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7410

Name of the Vulnerable Software and Affected Versions Westpac Mobile Banking application version 5.21 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SS...

Bank of Melbourne Twitter Account Hacked

Bank of Melbourne Twitter Account Hacked Last week, the Twitter account of the Bank of Melbourne was hacked and used to send direct messages containing phishing links to its followers. In a tweet, the bank said that: ATTN: Unauthorised DMs sent bw 4-5pm today, do not click link. No...