MAL-2024-11179 Malicious code in tailchat-service-swagger-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acf09d7e9f52a0406ff87b349906e6278f766537755abbd90395b2179ccd36fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailchat-service-openapi-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22511b2b576ee7a41e7c7f6abf4e9a9fdedded65c99367d47f3f5cda4ce875c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11178 Malicious code in tailchat-service-openapi-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22511b2b576ee7a41e7c7f6abf4e9a9fdedded65c99367d47f3f5cda4ce875c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11177 Malicious code in spinal-service-ticket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aae35c4e4ff6906cb7d4d11279ee76155e4fe161e95d96ecea1f4e61e9a67412 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11175 Malicious code in spinal-env-viewer-plugin-group-manager-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08d905db5ba537ed47f7f0ba2189c5b72f23c0d8de78591283e86cc1c8651634 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11174 Malicious code in spinal-env-viewer-graph-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15cfd840bc992aaee2f17022820c0f005a0e47a499c6939bc0ee0c5635cd47fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11172 Malicious code in spinal-core-connectorjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f55ec90344a6042cf94a3e9a576e833a0277da7732a8322612604d186cab49b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11171 Malicious code in readium-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e052a1c3b7fcfedb0cee689603d30bf043df8eebeff0146be74a4b0e218d62a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11160 Malicious code in @peakon/records (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7cc43d1543325c5d364cf817c9034c238a4bb976c18e7c1b77cde8e2063a5c0b The OpenSSF Package Analysis project identified '@peakon/records' @ 100.100.105 npm as malicious. It is considered malicious because: - The...

MAL-2024-11157 Malicious code in flpweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1990c310aa0a3cd0c27f4306fe0f81385afb6c137acc4f6b1c42ea5ceb3a4845 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11127 Malicious code in o-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74bc5048fb21f496bad53a05dea80054544d296f7a86832b46cfe4b8d5242fea The OpenSSF Package Analysis project identified 'o-table' @ 10.10.28 npm as malicious. It is considered malicious because: - The package...

Malicious code in byted-df (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 821138aac758315c7a31a463523c4930bdd52e67699199e4c8bda0511c5907f8 Importing the module triggers sending out the hostname to the package author. It looks to be a placeholder/pentest activity related to BytedDance. --- Category...

CVE-2024-11667

creationtimestamp| type| source ---|---|--- 2024-11-28 16:03:51+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113561425060709873 2024-11-29 13:29:46+00:00| exploited| https://t.me/CyberBulletin/1650 2024-11-29 22:48:52+00:00| seen|...

APT trends report Q3 2024

Kaspersky's Global Research and Analysis Team GReAT has been releasing quarterly summaries of advanced persistent threat APT activity for over seven years now. Based on our threat intelligence research, these summaries offer a representative overview of what we've published and discussed in more...

CVE-2018-9377

In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pending intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-38834

creationtimestamp| type| source ---|---|--- 2024-11-26 12:01:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113549148357118906 2024-11-26 13:04:11+00:00| seen| https://t.me/CyberBulletin/1625 2024-11-26 13:04:11+00:00| seen| https://t.me/CyberBulletin/26626 2024-11-26 15:02:55+00:00|...

MAL-2024-10901 Malicious code in aries-bifold-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eca3e60fffb3a648dbd8cdd504332376d85921d174fa35cf3d8dae17f1302543 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10900 Malicious code in rc-network (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92fa4153701892bbacd5a9c984d56b98fb7dde59df2dc84760fe47af95bad5fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10898 Malicious code in canvaskit-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8fec757cb441808c4cf235ccb1ef0bcf9325ffebc3a5efcc43bc21669e0feb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-0867

creationtimestamp| type| source ---|---|--- 2024-11-24 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-24 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-05-16 00:00:00+00:00| exploited| The Shadowserver...