Malicious code in @maps-bc/runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 10155ba7c84ace28dedd143dcb15c74cf718077864c2940d65e11f748f2b7db1 The OpenSSF Package Analysis project identified '@maps-bc/runtime' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2024-51518

creationtimestamp| type| source ---|---|--- 2024-11-05 12:11:33+00:00| seen| https://t.me/cvedetector/9851...

MAL-2024-10368 Malicious code in byteseep (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dcee5204a425aa98a98071c8eee88e547f7570e05c72c9e18f01477a0b044794 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in nuest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b492bc7bd440cf222a12c711590d7035a901a290bea145c0df822b55e57c0ebb A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in nerst (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ac5aa6644938e09002e1da1848fe502aad6e6f7c7733210529238eacd6bfb5a0 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10373 Malicious code in nurst (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ebc947e96588d0b0b3e06e9a4be04b7f86c8dedf4716471a19bf7c1c20144cbf A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in nuerst (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 155c4cfe70e7c556175ba3cc4e0c00815168e4e3a8b161ca72c0fcde99079ed1 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in bebitmf (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 74b4aea64b0811889f65fa66cb611912e1ff91bb08f22d2e0b3b5c9b8a179a63 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10363 Malicious code in x2vml-gml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c0a24139221a012c1dcb193331f49469571c2400d49c53489603dd68b26698e6 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in v2mlx-gml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 00b9359396313be6a33f8efe51b60793b58c9f0cb6d2862e074d4109c33c107f A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in v2xlm-gml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7fbdd4767b759c720bb13db759299986734471ff1064c52f7d25110c8e9aa617 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10359 Malicious code in lightseqe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6f3ebdee7f587049da541169c6218b3bade3e1ce54144846f1f16c39fa8594d6 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10350 Malicious code in chameleon-sdk-android (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 589be22e021ff78ea28c1042adb0a595cec7ba04c5c4050009471dcd91d7de2c The OpenSSF Package Analysis project identified 'chameleon-sdk-android' @ 9.3.5 npm as malicious. It is considered malicious because: - The...

Malicious code in cml-tt-sets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cf782b7bdc62c7fa7743c5fafc916bcd3c20ec2c23d89837b120d35d53659e6b The OpenSSF Package Analysis project identified 'cml-tt-sets' @ 9.3.5 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10353 Malicious code in semi-d2c (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 903534f26ef3e66645d16589e9db352586dcb5630c7b314a5466e66f37e0cfa3 The OpenSSF Package Analysis project identified 'semi-d2c' @ 9.3.5 npm as malicious. It is considered malicious because: - The package...

Malicious code in semi-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 05640460dfefb40e49d1b9fcfa054fabedc4ccdff887981a44f2f1e760b23661 The OpenSSF Package Analysis project identified 'semi-design' @ 9.3.5 npm as malicious. It is considered malicious because: - The package...

Google Warns of Actively Exploited CVE-2024-43093 Vulnerability in Android System

Google has warned that a security flaw impacting its Android operating system has come under active exploitation in the wild. The vulnerability, tracked as CVE-2024-43093, has been described as a privilege escalation flaw in the Android Framework component that could result in unauthorized access...

PT-2024-34678 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: Huawei HarmonyOS version 5.0.0 Description: The issue is a race condition vulnerability in the kernel network module. Successful exploitation of this vulnerability may affect availability, potentially leading to system compromise...

MAL-2024-10324 Malicious code in finsys-webcomponent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cce4759dae5c3e0526e14affa1a1dc24fd8a3f8189dc1c85bfdbb88cde5a7319 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10321 Malicious code in appdynamics-protobuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37a52fe7743188afac58b43269afe61a049bed39642c33558912976f5d73757e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...