MAL-2024-10542 Malicious code in akita-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 551f04343832933628b5f36ec11b0f08219b6ad2c16bdc366b56ce2977b5f721 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-50259

In the Linux kernel, the following vulnerability has been resolved: netdevsim: Add trailing zero to terminate the string in nsimnexthopbucketactivitywrite This was found by a static analyzer. We should not forget the trailing zero after copyfromuser if we will further do some string operations,...

MAL-2024-10540 Malicious code in aseemnpmk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4ea49246d59dff6f14c706b43c01a3cbda0e247126a5d67c6e91428922445f1e The OpenSSF Package Analysis project identified 'aseemnpmk' @ 99.99.90 npm as malicious. It is considered malicious because: - The package...

Malicious code in @bytedanc-ad/mui-vue2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c30379ad4ca7a644dc00d7fe6583a1f268e6fb8e076179cf094519d27cf2dc54 The OpenSSF Package Analysis project identified '@bytedanc-ad/mui-vue2' @ 89.3.5 npm as malicious. It is considered malicious because: - The...

MAL-2024-10465 Malicious code in @bytedanc-ad/mui-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b302cda103ab4e9d60bced8da79df7126ab12cceee30b5ca171d20bc10c1a77 The OpenSSF Package Analysis project identified '@bytedanc-ad/mui-react' @ 89.3.5 npm as malicious. It is considered malicious because: - The...

MAL-2024-10487 Malicious code in eslint-config-finance-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44cf24ec398ed242a5fc401c66a004a81c91e4bf0f9fe2e685c03d4d788be011 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10486 Malicious code in eslint-config-finance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d12427cc293ba0b610fa9341045e6d546b05be734e8b9b3135136720e183f04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10483 Malicious code in easy-transify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis da33e7bf1f97126745cda88021b8ac2884cd095a84a70caaf6938bb505f3f5df The OpenSSF Package Analysis project identified 'easy-transify' @ 7.2.3 npm as malicious. It is considered malicious because: - The package...

Malicious code in easy-transify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis da33e7bf1f97126745cda88021b8ac2884cd095a84a70caaf6938bb505f3f5df The OpenSSF Package Analysis project identified 'easy-transify' @ 7.2.3 npm as malicious. It is considered malicious because: - The package...

PT-2024-32302 · Winshot · Winshot

Name of the Vulnerable Software and Affected Versions: Inshot com.downloader.privatebrowser aka Video Downloader - XDownloader versions 1.3.5 and earlier Description: The issue allows an attacker to execute arbitrary JavaScript code via the com.downloader.privatebrowser.activity.PrivateMainActivi...

MAL-2024-10446 Malicious code in bytemlperf (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 abcc70611e2d35cabe7d6a6f7e88ff8f9fab7d9e2a42b0fc3c0d1f036c8582be A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10456 Malicious code in pysisphus (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a510d23b0043412f6d051cbcaa41d1b4669db81ccc94ce3f95a6e3b768862a46 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10445 Malicious code in batchran (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 19ed06a25f8868beb5f8e987240e85eaff57b5c995a393fbaa3ff7c517654e8c A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10459 Malicious code in shadokv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 50a86371d91df819e5ed74554d58457de377043882b8ba9f98f71b7abfa006e4 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10453 Malicious code in jaqmc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 76b75b81e33ae9df9b6383f48e916371a23f120cf492a567a8032352501c55de A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10460 Malicious code in shadowkw (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9584e23e5cf96daa5974754d9ab0a8993263f290ee3006eebf247024fd1b34f8 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10464 Malicious code in tarsire (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4c2c711f847efb4558ffe93e59a67ba83ecea84588d426ed5b0a2ac50254029a A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10455 Malicious code in physisyphus (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fcb188c86e167bc691e0353af3a43258a332759c78db7f4079fd187957d762a9 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10457 Malicious code in pysisyphes (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d912adeb14deb9684eadcdd58dc7e656b89143c5323b05c5bdd62f6993c56a60 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10582 Malicious code in ic-flows-platform (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7ddd18ddba219f2d0fe4c9bceab7e456d97d23dd4ba95b9cecd06bffecef2bef A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...