Malicious code in pewspwnrepo4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e19195a9e0daa1405f9c055a13cf7164173d64c6dcb74f8ecb42b2a49b717b97 The OpenSSF Package Analysis project identified 'pewspwnrepo4' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

CVE-2024-39250

creationtimestamp| type| source ---|---|--- 2024-07-13 20:31:48+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7974 2024-07-22 22:50:52+00:00| seen| https://t.me/cvedetector/1478...

Malicious code in alemmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e6439e28d1fe4888d5ea2c3c0bdfa9512092b20d6b0001069f0236329edab410 The OpenSSF Package Analysis project identified 'alemmi' @ 11.0.0 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2024-7740 Malicious code in alemmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e6439e28d1fe4888d5ea2c3c0bdfa9512092b20d6b0001069f0236329edab410 The OpenSSF Package Analysis project identified 'alemmi' @ 11.0.0 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2024-7733 Malicious code in browserlist-config-usaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 02d306368aa4feefa13bbaf28e12d66c8517a1f1e0a4f08e72afd9001d2b2cdb The OpenSSF Package Analysis project identified 'browserlist-config-usaa' @ 9.9.9 npm as malicious. It is considered malicious because: - The...

MAL-2024-7731 Malicious code in etp-config-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 22e9cd622d75b3bb30c9c31a8dcf71c38fc832db9306ad6ed4f9411bc5321c01 The OpenSSF Package Analysis project identified 'etp-config-store' @ 200.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in cx-api-client-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 315d3186e692fd6934de0d66c25255e03eb763a15daa0785e92e58a2abbbba60 The OpenSSF Package Analysis project identified 'cx-api-client-lite' @ 200.0.1 npm as malicious. It is considered malicious because: - The packa...

Malicious code in two-column-image-text-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 816a60cffab8a3e09e7bdd3135a8d8fdb6bca092a94ec723a64d7aecd057d471 The OpenSSF Package Analysis project identified 'two-column-image-text-grid' @ 69.69.69 npm as malicious. It is considered malicious because: -...

MAL-2024-7695 Malicious code in two-column-image-text-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 816a60cffab8a3e09e7bdd3135a8d8fdb6bca092a94ec723a64d7aecd057d471 The OpenSSF Package Analysis project identified 'two-column-image-text-grid' @ 69.69.69 npm as malicious. It is considered malicious because: -...

CISA Releases Advisory Detailing Red Team Activity During Assessment of US FCEB Organization, Highlighting Necessity of Defense-in-Depth

Today, CISA released CISA Red Team’s Operations Against a Federal Civilian Executive Branch Organization Highlights the Necessity of Defense-in-Depth in coordination with the assessed organization. This Cybersecurity Advisory CSA details key findings and lessons learned from a 2023 assessment,...

Malicious code in dependencyconfusion7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0f7917b183eaefa5d99ccf1984a0d7b5fec312946bc51784c3c850ef10676c89 The OpenSSF Package Analysis project identified 'dependencyconfusion7' @ 2.0.0 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-7747 Malicious code in @mariott/mi-headless-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 052067d97e0b49250cecab16aa79fa0a7dec5cb225d908a93dc9db97fb2f74d1 The OpenSSF Package Analysis project identified '@mariott/mi-headless-utils' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-7693 Malicious code in sap-attribute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6a5de89e4dd90b8b85bea5f4512df328d5a6a7c1aea2f79b4f8d3307e2328af8 The OpenSSF Package Analysis project identified 'sap-attribute' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-appid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6320c6ca957bf59f7842fdf23a8839fb30c8aee7f82d14bc2066d1c4d1505b11 The OpenSSF Package Analysis project identified 'sap-appid' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7688 Malicious code in sap-categories (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8915969d8530822c50077e17c288da7a30eed3ba1ea7f59b925794f7057b9705 The OpenSSF Package Analysis project identified 'sap-categories' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7676 Malicious code in sap-attachments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c20c6ef91093b214c595af75e3ecd38f60876660d3f82ee324f777af64e9309 The OpenSSF Package Analysis project identified 'sap-attachments' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7681 Malicious code in sap-boards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0f03ca612a15163c77abfa2590e258d664e33bc5d26670a73d6affe79ae0c8b7 The OpenSSF Package Analysis project identified 'sap-boards' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7669 Malicious code in sap-catname (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1ded0f51bfdbaec8f29cf41f4ba1847941f283704baf2a08b3d92aceadf005d1 The OpenSSF Package Analysis project identified 'sap-catname' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7652 Malicious code in sap-call (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ae3c2c5f325fdd688ce4d11cc5817769bd0f903c9d0df96c60c00cd96feb4639 The OpenSSF Package Analysis project identified 'sap-call' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7658 Malicious code in sap-campaignid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5373e0987d6bc6acd54f5640a9d3344549eeb913a0aa2311f77d3a163b8ac678 The OpenSSF Package Analysis project identified 'sap-campaignid' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...