MAL-2024-10782 Malicious code in rn-native-portals (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9cc76bce72b94e6ae0b2f629d3fc88141eeebe2e6d7f59c886a7ca7b8ec6d078 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10781 Malicious code in rn-i18n-extensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec389a5953658ea1bda762a714a07855e1761843aef44b99159036fe37c81523 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10780 Malicious code in rich-text-slate-rc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1974a05b4def032650d8412ad77b9ee7b6e530942c4a3ccb90e9c07d5b58830a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10778 Malicious code in redux-store-immutable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59b3c7c3c688154e0e3a57a2a85b1e6f27a506c0a4020c324d3d5120a517cad0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10777 Malicious code in realtime-translation-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e34e252889fa5780663d4a11bb4e396af8861e1c5877da57c6e558e553521302 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10776 Malicious code in react-pro-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e36b1f84a78fdd75413789d169ba2770aee6218073cb5a52d7ce2997b7684a74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Zero-Day Exploitation Targeting Palo Alto Networks Firewall Management Interfaces

On Friday, November 8, 2024, cybersecurity firm Palo Alto Networks PAN published a bulletin PAN-SA-2024-0015 advising firewall customers to take steps to secure their firewall management interfaces amid unverified rumors of a possible new vulnerability. Rapid7 threat intelligence teams have also...

MAL-2024-10725 Malicious code in libpnpmpublish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ec46bf85afceffde52ecf130dc77cf4bc7602601683fa3b6bb41a0d1c417eb18 The OpenSSF Package Analysis project identified 'libpnpmpublish' @ 99.3.5 npm as malicious. It is considered malicious because: - The package...

Malicious code in libpnpmpublish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ec46bf85afceffde52ecf130dc77cf4bc7602601683fa3b6bb41a0d1c417eb18 The OpenSSF Package Analysis project identified 'libpnpmpublish' @ 99.3.5 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10722 Malicious code in evocateur_libpnpmpublish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b93729eca5771ff7d79aef7f3b49bf2b018dded8dd351af050ed61daa04903a8 The OpenSSF Package Analysis project identified 'evocateurlibpnpmpublish' @ 99.3.5 npm as malicious. It is considered malicious because: - The...

Malicious code in evocateur_libpnpmpublisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e097e9da44381fae024bbe6eba31fcf32d11ba6c7e3c489d60ef22c36f13db75 The OpenSSF Package Analysis project identified 'evocateurlibpnpmpublisher' @ 99.3.5 npm as malicious. It is considered malicious because: - The...

MAL-2024-10716 Malicious code in newbharatv2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bccffdbbaea730330c6b6156aac69a4852d53debfa863456e47b3d3cb0c53561 The OpenSSF Package Analysis project identified 'newbharatv2' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

CVE-2024-10793

The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the userid parameter in all versions up to, and including, 5.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrip...

MAL-2024-10773 Malicious code in rct-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53d42a5f1b620b206b85fa553b60cc9f0bba3f0b16ab0d8ba57a635125fb3f28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10714 Malicious code in erc4337 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 331ff3b73d0d5c94f6156a7afd0dc8aaf6b6b0c316abbe82155de79a1e26d130 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10713 Malicious code in atlas-query-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c6c37cad26e052e458501d412ce970fc2faf0d3ce12d6e7b5794e6161ab7e4d8 The OpenSSF Package Analysis project identified 'atlas-query-editor' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

Malicious code in atlas-query-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c6c37cad26e052e458501d412ce970fc2faf0d3ce12d6e7b5794e6161ab7e4d8 The OpenSSF Package Analysis project identified 'atlas-query-editor' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

MAL-2024-10769 Malicious code in preact-cli-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b97d147bbe2f906512da2cfa2de62ecc0c18b2afd14ceb1dfd755122300ea57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-10793: Improper Neutralization of Input During Web Page Generation

The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the userid parameter in all versions up to, and including, 5.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrip...

PT-2024-16552

Name of the Vulnerable Software and Affected Versions WP Activity Log plugin for WordPress versions up to, and including, 5.2.1 Description The issue is related to Stored Cross-Site Scripting via the user id parameter due to insufficient input sanitization and output escaping. This allows...