CVE-2024-8704

creationtimestamp| type| source ---|---|--- 2024-09-26 13:48:57+00:00| seen| https://t.me/cvedetector/6406...

Malicious code in @dp-bpsc-tiktok/ogc-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 392d2ec573af02b972bc2bb4fd5b33b1c1f6bd8a2962744ed929259effae7c82 The OpenSSF Package Analysis project identified '@dp-bpsc-tiktok/ogc-analytics' @ 1.0.0 npm as malicious. It is considered malicious because: -...

MAL-2024-8964 Malicious code in b2b-buyer-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c8aef2e688f2677377a3cd234067c470e946e9197929d9b9f8fed81a6774669 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CISA Warns of Hurricane-Related Scams

As Hurricane Helene approaches, CISA urges users to remain on alert for potential malicious cyber activity. Fraudulent emails and social media messages—often containing malicious links or attachments—are common after major natural disasters. Exercise caution in handling emails with...

MAL-2024-8963 Malicious code in common-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 928c83c31f108c60035b2c6c96605de1111ca0ca0faf7fd554e461357801b6cf The OpenSSF Package Analysis project identified 'common-icons' @ 1.0.83 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8962 Malicious code in visa-ui-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd965500f041551c6ece4a137b88df7d7c601228f7e039a8130a8514a48b98e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8961 Malicious code in k0m3g4-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd260efc78494efc57d67f6576d7ae30b8e58e866ee7a3c228692548174c1e19 The OpenSSF Package Analysis project identified 'k0m3g4-test' @ 2.999.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8954 Malicious code in cgpt_burn_tracker_frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6e14d717ae90e2a54db35f9e5962f984fc420b2afa1d3b8e0bc0d3631d7945bb The OpenSSF Package Analysis project identified 'cgptburntrackerfrontend' @ 1.0.2 npm as malicious. It is considered malicious because: - The...

MAL-2024-8953 Malicious code in meditek (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79ebeff786b44dfe1e4d9920b228a143335564879c286690455423f754824a88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8948 Malicious code in missive-webhooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c542320393405abc1b813877a068a06aa9811a95a509d22bf8a5e95bb4873119 The OpenSSF Package Analysis project identified 'missive-webhooks' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Tracking cloud-fluent threat actors - Part one: Atomic cloud IOCs

Strategies for tracking and defending against malicious activity and threats in the cloud using atomic indicators of compromise IOCs...

PT-2025-3748 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to insufficient input validation in a component of the Android operating system framework. This could allow an attacker to elevate their privileges. There is a potentia...

MAL-2024-8937 Malicious code in labelv2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0cda1c25c57bcf643d5f0b072d315ccff37c5423681fbd3f6f6970ab021f51a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tannucolingboys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis be8167659390a471b016dfb0b25a778b2a77374ac31f845966ea70ce799ca081 The OpenSSF Package Analysis project identified 'tannucolingboys' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8935 Malicious code in tannucolingboys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis be8167659390a471b016dfb0b25a778b2a77374ac31f845966ea70ce799ca081 The OpenSSF Package Analysis project identified 'tannucolingboys' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8934 Malicious code in @the-df-company/commod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5ef49313b5c6faeeb4fe243f85058ce379b31887177f5dbe49a4dac3252fe7f0 The OpenSSF Package Analysis project identified '@the-df-company/commod' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in @the-df-company/commod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5ef49313b5c6faeeb4fe243f85058ce379b31887177f5dbe49a4dac3252fe7f0 The OpenSSF Package Analysis project identified '@the-df-company/commod' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-8929 Malicious code in smp-imsc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5a2c37b45dcf00d1c87e46d7fee96a0d5d5736d22bc0094618bea415a79bed4e The OpenSSF Package Analysis project identified 'smp-imsc' @ 99.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8928 Malicious code in learning_npm1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f3b173b32e267c6a9b7455320bda81f08ce154ad6315aeaea540133a9f0ab232 The OpenSSF Package Analysis project identified 'learningnpm1' @ 100.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8922 Malicious code in vehicle-optionalproducts-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 52513e322c63383065f4e0e5b8b22dbb1452248d372c74fd463402c7179e5abb The OpenSSF Package Analysis project identified 'vehicle-optionalproducts-ui' @ 99.0.0 npm as malicious. It is considered malicious because: - T...