MAL-2024-9086 Malicious code in @linx-ui/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a70dd8ec71455f4177650ed33f72b8da1f8067e2afbebd634836da68f44cbc53 The OpenSSF Package Analysis project identified '@linx-ui/shared' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9079 Malicious code in interactive-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eca3bcc821732a02b79cfd930582365b504c50377f31d23b6f2320ebb784914a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9078 Malicious code in aou-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 14d557b38b0c01886a47e3e3a39e8f10cb4b839ba9541d49e129c75ad18755ae The OpenSSF Package Analysis project identified 'aou-ui' @ 0.0.3 npm as malicious. It is considered malicious because: - The package communicate...

PT-2024-7398 · Palo Alto Networks · Palo Alto Networks Cortex Xdr Agent

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Cortex XDR Agent affected versions not specified Description: A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to...

MAL-2024-9073 Malicious code in speech-to-speech-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 947b44b1c26d3fdd2e1470d18b34076e52b1506fbadbdf85505632a63e4b6c9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9071 Malicious code in com.lootlocker.lootlockersdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3eadafa20871062037f566c91f49770323a50ffaff90581cdab78bdf6cb0b86f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9069 Malicious code in @b2bneo/components-tabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a1d577f52f10cee6de3de2dee9eb8d3d70fb94c04b41f3dfb93794409066d6c8 The OpenSSF Package Analysis project identified '@b2bneo/components-tabs' @ 1.3.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-9068 Malicious code in verida-tech-demos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ded9af82932dfcd9a6021dbd383ebadc322bdfc63b8c68d1981537b14ab226b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9067 Malicious code in website-scanner (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bab4a414e51f614858ff935138ccb2632b0ba1801566c398a699e692715ccaae The obfuscated code in setup.py on installation collects information about the system all possible about hardware, available resources, IP, names, etc. and sen...

Malicious code in algoliasearch-v5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 855faa64da2f22ef512ead61e2ee68ababe304f51a2f9a0e0daeff0443902fa2 The OpenSSF Package Analysis project identified 'algoliasearch-v5' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9057 Malicious code in algoliasearch-v5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 855faa64da2f22ef512ead61e2ee68ababe304f51a2f9a0e0daeff0443902fa2 The OpenSSF Package Analysis project identified 'algoliasearch-v5' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9048 Malicious code in ens.domains-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 86e21617540f2c51cdccf6deb871c1f9e76cfaeb06a565c7265a1d7d5674e293 The OpenSSF Package Analysis project identified 'ens.domains-v2' @ 1.2.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9049 Malicious code in transferwise-iconfont (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 20403e6738cf9e7007032519a10c0ba231cbd8b284a67324bdbc083663503fc3 The OpenSSF Package Analysis project identified 'transferwise-iconfont' @ 2.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in transferwise-iconfont (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 20403e6738cf9e7007032519a10c0ba231cbd8b284a67324bdbc083663503fc3 The OpenSSF Package Analysis project identified 'transferwise-iconfont' @ 2.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-9044 Malicious code in hakka (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1baf872685dd4243ab821d1f37c342f5af09558faf5e9bc83e1fd16505802029 The OpenSSF Package Analysis project identified 'hakka' @ 2.1.2 npm as malicious. It is considered malicious because: - The package communicates...

Huawei HarmonyOS/EMUI Permission Issues Vulnerability

Huawei EMUI and Huawei HarmonyOS are both products of the Chinese company Huawei Huawei.Huawei EMUI is a mobile operating system based on Android development.Huawei HarmonyOS is an operating system. Provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS/EMU...

MAL-2024-9042 Malicious code in o-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6d737f5ee09d703e74c23a6e240e943dacba7722152cb737b6e67feeda7bfeb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ds-home (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13795fdee5b77f52426cd3650250e826b6df39c418ac2956442a8016b4535e4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9036 Malicious code in @kp-admin/history (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9291332b4f8b2a62e28230207b0b18e9e9f5e162e170870f684b14a27ea74f34 The OpenSSF Package Analysis project identified '@kp-admin/history' @ 20.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in @gintel/personal-assistant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ceacaddd98b873d32e3e6aa49bd9d48f964eca12ffe724a93abeee1ca81004db The OpenSSF Package Analysis project identified '@gintel/personal-assistant' @ 0.180.0 npm as malicious. It is considered malicious because: - T...