MAL-2024-9032 Malicious code in @kp-admin/main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e5dc03ae8edb86b5c5bd3968c80bda004a2d31b59095717c3ca8d4f6c1a9a553 The OpenSSF Package Analysis project identified '@kp-admin/main' @ 20.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9030 Malicious code in intercom-openapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3eb4800eebfbaf5b4769f3ed6e0cdff3b37e8f0ce5c2f08b9b57dfa6fea62394 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9029 Malicious code in nuvei-commercetools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 841be1dc2418006e102dcc464f2f6219e3745c922315979f19e9524f54693c2d The OpenSSF Package Analysis project identified 'nuvei-commercetools' @ 1.5.0 npm as malicious. It is considered malicious because: - The packag...

Malicious code in cryptograohy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 67095679f8af3205e005b17a996da2ba17789715d7c66e4fcf31d8c387b85c00 The pyprettifier library has a feature to send out the user home path throuh the logger. It's attached to the init of EmojiConverter class. Other related...

Malicious code in saywh11222 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 66e2b9f8537aaebeea0768739ff431e4fe4c8dc5ea9bab0d191d6f555384b25f The OpenSSF Package Analysis project identified 'saywh11222' @ 0.0.1 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-9022 Malicious code in saywh11222 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 66e2b9f8537aaebeea0768739ff431e4fe4c8dc5ea9bab0d191d6f555384b25f The OpenSSF Package Analysis project identified 'saywh11222' @ 0.0.1 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-9019 Malicious code in alertsorchestration-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad590e8c8853e4883c2994808bae19870b1d76002b74c084b196e7e4ebcf6cea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9017 Malicious code in notrealpackage-blac (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73568a8a9ef3dda38a3e5c29930a0e64d1cc37f21e1cb90f77328c71f83604fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9005 Malicious code in saywh222 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 776c407a0a9a3c3b242d222e9b22ada03db555fd91538182fdc5d059b1ddcae7 The OpenSSF Package Analysis project identified 'saywh222' @ 0.0.1 pypi as malicious. It is considered malicious because: - The package...

Malicious code in saywhu (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 67dc65eeb23101b56981a723f315b344ac7ba4773b9a712f82009fbccea7b430 The OpenSSF Package Analysis project identified 'saywhu' @ 0.0.1 pypi as malicious. It is considered malicious because: - The package communicat...

CVE-2024-8608

creationtimestamp| type| source ---|---|--- 2024-09-27 15:03:03+00:00| seen| https://t.me/cvedetector/6508...

MAL-2024-8997 Malicious code in neuron-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c39e11d5c0e9f49ca7c1e136d6f73f692162e1873d0def4a3135bd3dacbdd9ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8994 Malicious code in assistants-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49dcd943b6b43273aa613aed19e623aa2ae67153ce323248811b64b441f38364 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-47291

Permission vulnerability in the ActivityManagerService AMS module Impact: Successful exploitation of this vulnerability may affect availability...

PT-2024-32503 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a permission vulnerability in the ActivityManagerService AMS module. Successful exploitation of this vulnerability may affect availability. There is no information...

Huawei HarmonyOS 安全漏洞

Huawei EMUI and Huawei HarmonyOS are both products of the Chinese company Huawei Huawei.Huawei EMUI is a mobile operating system based on Android development.Huawei HarmonyOS is an operating system. Provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS/EMU...

Malicious code in setup-specmatic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 37056a566edf4edb22af5350f7710d850797b914acbc38bfce3554f44db61d86 The OpenSSF Package Analysis project identified 'setup-specmatic' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8985 Malicious code in setup-specmatic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 37056a566edf4edb22af5350f7710d850797b914acbc38bfce3554f44db61d86 The OpenSSF Package Analysis project identified 'setup-specmatic' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8981 Malicious code in csm-installation-wizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b5bdad9e0b6a88bc81e8ae16cc200d4c4ac3e021b0583309fbc4338574fc64b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8980 Malicious code in defillama-apy-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5607feee6e6c7126d6cba02f493742dca4eee003dd55793c1346373a66cbb9c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...