MAL-2024-10792 Malicious code in seller-assistance-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e5c57c936ac6211ed5848aa66442e47c82ea28997ce077d9947e86226f6d528 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10791 Malicious code in seller-assistance-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9fbd59242e61985b8479eb67bfe945856c24c296a5130f77e8b28ae2631db7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10788 Malicious code in seatalk-protocol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1b49c417192086e73f64c53ea45009ebeb43e687397b29cc71fd36877345680 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10787 Malicious code in seatalk-openapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1ba364a75979c4daf8df3fca9ae125f39309f1e2aaaf2ee625eef7a3e9a1d30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10786 Malicious code in scm-retail-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d5c9460f2f7b76b7df92b6f3c8f8237b18cac972b6424471eae0ccd9c78963d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10785 Malicious code in scfe-joint-test-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3833cf8ad16d9a1273233a6ac79ee110667d3ecd4578d106dff23793d703958 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10784 Malicious code in sc-case-dispute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3357583fc362d3c84451a6e68a288423fd4adc4e767eaff6dbbcbb7045a26f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10783 Malicious code in rollup-plugin-amd-output-enhance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dce851722a146abc3b5df317ad799e1753177138eeb4efa09300da2f6625f08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2017-13311

In the read function of ProcessStats.java, there is a possible read/write serialization issue leading to a permissions bypass. This could lead to local escalation of privilege where an app can start an activity with system privileges with no additional execution privileges needed. User interactio...

MAL-2024-10782 Malicious code in rn-native-portals (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9cc76bce72b94e6ae0b2f629d3fc88141eeebe2e6d7f59c886a7ca7b8ec6d078 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10781 Malicious code in rn-i18n-extensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec389a5953658ea1bda762a714a07855e1761843aef44b99159036fe37c81523 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10780 Malicious code in rich-text-slate-rc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1974a05b4def032650d8412ad77b9ee7b6e530942c4a3ccb90e9c07d5b58830a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10778 Malicious code in redux-store-immutable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59b3c7c3c688154e0e3a57a2a85b1e6f27a506c0a4020c324d3d5120a517cad0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10777 Malicious code in realtime-translation-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e34e252889fa5780663d4a11bb4e396af8861e1c5877da57c6e558e553521302 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10776 Malicious code in react-pro-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e36b1f84a78fdd75413789d169ba2770aee6218073cb5a52d7ce2997b7684a74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Zero-Day Exploitation Targeting Palo Alto Networks Firewall Management Interfaces

On Friday, November 8, 2024, cybersecurity firm Palo Alto Networks PAN published a bulletin PAN-SA-2024-0015 advising firewall customers to take steps to secure their firewall management interfaces amid unverified rumors of a possible new vulnerability. Rapid7 threat intelligence teams have also...

MAL-2024-10725 Malicious code in libpnpmpublish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ec46bf85afceffde52ecf130dc77cf4bc7602601683fa3b6bb41a0d1c417eb18 The OpenSSF Package Analysis project identified 'libpnpmpublish' @ 99.3.5 npm as malicious. It is considered malicious because: - The package...

Malicious code in libpnpmpublish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ec46bf85afceffde52ecf130dc77cf4bc7602601683fa3b6bb41a0d1c417eb18 The OpenSSF Package Analysis project identified 'libpnpmpublish' @ 99.3.5 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10722 Malicious code in evocateur_libpnpmpublish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b93729eca5771ff7d79aef7f3b49bf2b018dded8dd351af050ed61daa04903a8 The OpenSSF Package Analysis project identified 'evocateurlibpnpmpublish' @ 99.3.5 npm as malicious. It is considered malicious because: - The...

Malicious code in evocateur_libpnpmpublisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e097e9da44381fae024bbe6eba31fcf32d11ba6c7e3c489d60ef22c36f13db75 The OpenSSF Package Analysis project identified 'evocateurlibpnpmpublisher' @ 99.3.5 npm as malicious. It is considered malicious because: - The...