CVE-2024-56717

creationtimestamp| type| source ---|---|--- 2024-12-29 09:07:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113735318485953258 2024-12-29 09:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3legom4ilkp2o 2024-12-29 10:41:18+00:00| seen|...

CVE-2024-13006

creationtimestamp| type| source ---|---|--- 2024-12-29 08:10:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113735093418778305 2024-12-29 08:15:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3leglafsctt2e 2024-12-29 09:50:59+00:00| seen|...

CVE-2024-12856

creationtimestamp| type| source ---|---|--- 2024-12-27 16:15:50+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecf5eb7so2l 2024-12-27 17:41:58+00:00| seen| https://t.me/cvedetector/13787 2024-12-27 18:19:54+00:00| seen|...

Malicious code in vesu_changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6834e9ec748ab087db6a8b6720dd7c18ab0652d965192663dae6ba0b7681c7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zoomapps-texteditor-vuejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b6be9c754c32184fac89d2d416b8d75cc15d7bb20219f8ace3c698d6e415fff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12130 Malicious code in nativescript-gainsight-px (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a623f285a8491c50ebbad0ad2a62988fbf68724329f6d7b0a7d30b1bf44ded73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12126 Malicious code in @awan_7715/model-viewer-space-opera (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e555e285993ff5179f3dad8424c83097053d02d6b4a91a72319eaabb6f1e6282 The OpenSSF Package Analysis project identified '@awan7715/model-viewer-space-opera' @ 1.1.1 npm as malicious. It is considered malicious becaus...

MAL-2024-12117 Malicious code in react-release-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3056b390e6fea55432a197cca0d614e66de98058a3e4b6087a547a66327ee6c5 The OpenSSF Package Analysis project identified 'react-release-manager' @ 1.1.3 npm as malicious. It is considered malicious because: - The...

North Korean Hackers Pull Off $308M Bitcoin Heist from Crypto Firm DMM Bitcoin

Japanese and U.S. authorities have formerly attributed the theft of cryptocurrency worth $308 million from cryptocurrency company DMM Bitcoin in May 2024 to North Korean cyber actors. "The theft is affiliated with TraderTraitor threat activity, which is also tracked as Jade Sleet, UNC4899, and Sl...

Malicious code in cloudinary-ct-run-sub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b8b17191416c445db03bfceae872f6642a1171a2300b65df0c546dd5a1fc19bc The OpenSSF Package Analysis project identified 'cloudinary-ct-run-sub' @ 1.1.0 npm as malicious. It is considered malicious because: - The...

CVE-2024-12894

creationtimestamp| type| source ---|---|--- 2024-12-22 12:11:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113696407969484827 2024-12-22 12:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldvffgxsve25 2024-12-22 13:54:25+00:00| seen|...

Malicious code in openai-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 025855a4aad79b7f6961770b428612b04f28558b5aaa0eafd1590c9bd641dcc0 The OpenSSF Package Analysis project identified 'openai-extension' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in conversations-embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e54647ae689c5f7d3193ceb233f106eac2255d584c793de83b7de77dd086b2dc The OpenSSF Package Analysis project identified 'conversations-embed' @ 1.21.0 npm as malicious. It is considered malicious because: - The packa...

Malicious code in mono-faucet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a9b64ffe282d49a1f13db908a30b2713843c5dc3ac78ec52d50c8bcf450e401 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-56357

creationtimestamp| type| source ---|---|--- 2024-12-20 20:29:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113687040938359325 2024-12-20 21:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldrcmzzy3w2o 2024-12-20 23:26:35+00:00| seen|...

Malicious code in squirreldisk-tauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21b61244e5ef1dd2b28d94395ad515353e3bcf1c00f2629376c95305ca4323e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12067 Malicious code in aauto-assign-team-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ef1fe2d72d5632ea92996b145c4713780023fe149d21e2f24e5ba190caf8100 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-42867

creationtimestamp| type| source ---|---|--- 2024-12-20 03:43:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113683085800523490 2024-12-20 04:15:19+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldpjmkitwy2v 2024-12-20 05:52:22+00:00| seen|...

Malicious code in yandex-pandora-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e7c8829575ea2c09d2db8f6f98a73635e882f6ac8084b06174761270128f3438 The OpenSSF Package Analysis project identified 'yandex-pandora-docs' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...

CVE-2024-56145

creationtimestamp| type| source ---|---|--- 2024-12-18 22:54:13+00:00| seen| https://t.me/cvedetector/13254 2024-12-19 03:15:06+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113677310750656920 2024-12-19 21:48:04+00:00| seen|...