Tag: JavaScript
Old Telegram exports can still run a hidden attacker script
A flaw fixed in July left previously exported HTML chats able to run hidden JavaScript that copies messages to an…
Sandbox escape in isolated-vm gives guests host memory control
Endor Labs shows a type confusion in isolated-vm lets sandboxed code take over the host process.
Adform tracker hack redirected crypto payments to attacker wallets
A poisoned JavaScript file served by ad tech firm Adform rewrote crypto wallet addresses on customer sites.
Hidden Backdoor Attack Targets Three Popular WordPress Plugins
Attackers tampered with JavaScript files for three popular WordPress plugins, creating hidden admin accounts and web shells only when site…
Axios NPM Package Breached in North Korean Supply Chain Attack Affecting Millions
Backdoored versions of the Axios JavaScript library, downloaded by roughly 3% of its 100M weekly userbase, deployed cross-platform RATs via…