MAL-2022-7233 Malicious code in wp-calypso (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffe275ec8694537c40cb3d3b6a16086df95b5f18e98b1f50c06cb319d0ca5ec4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wp-calypso (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffe275ec8694537c40cb3d3b6a16086df95b5f18e98b1f50c06cb319d0ca5ec4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in wp-calypso

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

WS-2019-0423

In Automattic/wp-calypso, versions desktop-1.3.0-alpha till desktop/4.1.0, the main page does not disable password autocomplete. An attacker with access to the browser instance and local system credentials can steal the credentials...