Cookie Consent by Free Privacy Policy Generator 📌 NPM swats path traversal bug that lets evil packages modify, steal files. That's bad for JavaScript crypto-wallets
Team IT Security Nachrichtenportal Logo

🏠 Team IT Security News

TSecurity.de ist eine Online-Plattform, die sich auf die Bereitstellung von Informationen,alle 15 Minuten neuste Nachrichten, Bildungsressourcen und Dienstleistungen rund um das Thema IT-Sicherheit spezialisiert hat.
Ob es sich um aktuelle Nachrichten, Fachartikel, Blogbeiträge, Webinare, Tutorials, oder Tipps & Tricks handelt, TSecurity.de bietet seinen Nutzern einen umfassenden Überblick über die wichtigsten Aspekte der IT-Sicherheit in einer sich ständig verändernden digitalen Welt.

16.12.2023 - TIP: Wer den Cookie Consent Banner akzeptiert, kann z.B. von Englisch nach Deutsch übersetzen, erst Englisch auswählen dann wieder Deutsch!

Google Android Playstore Download Button für Team IT Security
RSS Feed Symbol für Team IT Security 800+ IT News als RSS Feed abonnieren



📚 NPM swats path traversal bug that lets evil packages modify, steal files. That's bad for JavaScript crypto-wallets


💡 Newskategorie: IT Security Nachrichten
🔗 Quelle: go.theregister.co.uk

Trio of vulnerabilities made registry full of uncertain code even more of a risk

On Wednesday, NPM, Inc, the California-based biz that has taken it upon itself to organize the world's JavaScript packages into the npm registry, warned that its command line tool, the npm CLI, has a rather serious security vulnerability. Version 6.13.4 has been rushed out with a fix.…

...



Sharing is caring on Social Media

🔗 Reddit
🔗 Telegram
🔗 LinkedIn
🔗 Xing
🔗 Twitter
🔗 Whatsapp
🔗 Facebook
🔗 Flipboard

Join the Team IT Security Community

🔗 "IT Sicherheit" Reddit-Gruppe
🔗 "IT Sicherheit" Telegramm-Seite

📌 On trusting NPM: Early in the month, Lance R. Vick noticed that the maintainer of the NPM foreach package let their personal email domain expire, so they bought it and now “controls foreach on NPM and the 36,826 projects that depend on it”.


📈 37.27 Punkte

📌 LofyLife: malicious npm packages steal Discord tokens and bank card data


📈 33.94 Punkte

📌 Malicious npm packages steal Discord users’ payment card info


📈 33.94 Punkte

📌 Malicious Npm Packages Designed to Steal Discord Tokens


📈 33.94 Punkte

📌 LofyGang Distributed ~200 Malicious NPM Packages to Steal Credit Card Data


📈 33.94 Punkte

📌 Hackers Deploy Malicious npm Packages on GitHub to Steal SSH Keys


📈 33.94 Punkte

📌 Oracle swats 252 bugs in patch update


📈 33.26 Punkte

📌 Jailed Kansas 'Swat' Perpetrator Sneaks Online, Threatens More 'Swats'


📈 33.26 Punkte

📌 npm packages used by crypto exchanges compromised


📈 32.73 Punkte

📌 NPM packages posing as speed testers install crypto miners instead


📈 32.73 Punkte

📌 CVE-2023-46496 | EverShop NPM up to 1.0.0-rc.7 Request api/files DELETE path traversal


📈 32.58 Punkte

📌 NPM JavaScript packages abused to create scambait links in bulk


📈 31.97 Punkte

📌 8 NPM Packages for JavaScript Beginners [2024][+tutorials]


📈 31.97 Punkte

📌 451 PyPI packages install Chrome extensions to steal crypto


📈 29.73 Punkte

📌 Malicious npm package caught trying to steal sensitive Discord and browser files


📈 28.92 Punkte

📌 WhatsApp Flaw Lets Users Modify Group Chats to Spread Fake News


📈 27.56 Punkte

📌 Call of Duty: Modern Warfare 'Gunsmithing' lets you modify your weapons


📈 27.56 Punkte

📌 CVE-2005-10002 | almosteffortless secure-files Plugin up to 1.1 on WordPress secure-files.php sf_downloads downloadfile path traversal


📈 27.22 Punkte

📌 Facial Recognition In Schools: Clever Tech. Bad, Bad, Bad Implementation


📈 26.81 Punkte

📌 Apple Executive Explains Why Sideloading Apps Is Bad, Bad, Bad


📈 26.81 Punkte

📌 Microsoft Edge Flaw Lets Hackers Steal Local Files


📈 26.43 Punkte

📌 Internet Explorer zero-day lets hackers steal files from Windows PCs


📈 26.43 Punkte

📌 Unpatched Internet Explorer Zero-day Vulnerability Lets Attackers Hack Windows PC & Steal Files


📈 26.43 Punkte

📌 Windows Remote Assistance Exploit Lets Hackers Steal Sensitive Files


📈 26.43 Punkte

📌 Windows Remote Assistance Exploit Lets Hackers Steal Sensitive Files


📈 26.43 Punkte

📌 'Zip Slip' security hole lets evil archive files hack your computer


📈 25.9 Punkte

📌 rollup-plugin-dev-server on npm readFileFromContentBase path traversal


📈 25.51 Punkte

📌 rollup-plugin-serve on npm readFileFromContentBase path traversal


📈 25.51 Punkte

📌 marked-tree on npm index.js fs.readFile path traversal


📈 25.51 Punkte

📌 marscode on npm index.js fs.readFile path traversal


📈 25.51 Punkte

📌 fast-http on npm index.js fs.readFile path traversal


📈 25.51 Punkte

📌 CVE-2023-46497 | EverShop NPM up to 1.0.0-rc.7 Request createFolder.js mkdirSync path traversal


📈 25.51 Punkte

📌 CVE-2023-46493 | EverShop NPM up to 1.0.0-rc.7 Request fileBrowser/browser.js readDirSync path traversal


📈 25.51 Punkte

📌 CVE-2019-16777 | npm CLI up to 6.13.4 Install Script path traversal (RHSA-2020:0573)


📈 25.51 Punkte

📌 CVE-2019-16776 | npm CLI up to 6.13.3 Install Script bin path traversal (RHSA-2020:0573)


📈 25.51 Punkte











matomo

Kontakt

24/7 [email protected]

Weitere Informationen

Google Android Playstore Download Button für Team IT Security
🔗 Impressum
🔗 Datenschutz
Paypal Spenden für Projekt

Social Media

🔗 Facebook
🔗 Reddit
🔗 Team IT Security als Elektron App
🔗 © 2015-2023 Team IT Security Nachrichtenportal über Cybersecurity
🔗 CMS "myDraft" a PHP Portal Software