MAL-2024-10363 Malicious code in x2vml-gml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c0a24139221a012c1dcb193331f49469571c2400d49c53489603dd68b26698e6 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in v2mlx-gml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 00b9359396313be6a33f8efe51b60793b58c9f0cb6d2862e074d4109c33c107f A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in v2xlm-gml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7fbdd4767b759c720bb13db759299986734471ff1064c52f7d25110c8e9aa617 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10359 Malicious code in lightseqe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6f3ebdee7f587049da541169c6218b3bade3e1ce54144846f1f16c39fa8594d6 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10350 Malicious code in chameleon-sdk-android (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 589be22e021ff78ea28c1042adb0a595cec7ba04c5c4050009471dcd91d7de2c The OpenSSF Package Analysis project identified 'chameleon-sdk-android' @ 9.3.5 npm as malicious. It is considered malicious because: - The...

Malicious code in cml-tt-sets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cf782b7bdc62c7fa7743c5fafc916bcd3c20ec2c23d89837b120d35d53659e6b The OpenSSF Package Analysis project identified 'cml-tt-sets' @ 9.3.5 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10353 Malicious code in semi-d2c (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 903534f26ef3e66645d16589e9db352586dcb5630c7b314a5466e66f37e0cfa3 The OpenSSF Package Analysis project identified 'semi-d2c' @ 9.3.5 npm as malicious. It is considered malicious because: - The package...

Malicious code in semi-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 05640460dfefb40e49d1b9fcfa054fabedc4ccdff887981a44f2f1e760b23661 The OpenSSF Package Analysis project identified 'semi-design' @ 9.3.5 npm as malicious. It is considered malicious because: - The package...

Google Warns of Actively Exploited CVE-2024-43093 Vulnerability in Android System

Google has warned that a security flaw impacting its Android operating system has come under active exploitation in the wild. The vulnerability, tracked as CVE-2024-43093, has been described as a privilege escalation flaw in the Android Framework component that could result in unauthorized access...

PT-2024-34678 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: Huawei HarmonyOS version 5.0.0 Description: The issue is a race condition vulnerability in the kernel network module. Successful exploitation of this vulnerability may affect availability, potentially leading to system compromise...

MAL-2024-10324 Malicious code in finsys-webcomponent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cce4759dae5c3e0526e14affa1a1dc24fd8a3f8189dc1c85bfdbb88cde5a7319 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10321 Malicious code in appdynamics-protobuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37a52fe7743188afac58b43269afe61a049bed39642c33558912976f5d73757e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10323 Malicious code in bridgetrack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76ad310435d9166777216b86549a2cd213058a9685054980163c822e035185eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10328 Malicious code in sc-meta-layer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e8afeccfd77a3b36e9c24aa1057807ba8f2a18972791b3cbc857e3d961e60d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10313 Malicious code in evernote-thrift (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0cafc1fbe5d3aca2d0d736873649060e6c9dce551db713b3d91723a78f9a2f22 The OpenSSF Package Analysis project identified 'evernote-thrift' @ 1.4.8 npm as malicious. It is considered malicious because: - The package...

Malicious code in @captivateiq/random (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ee1cb55ec1b56be298aa872d3923e32e94edea10bbe8563c0ecd12a0d93cf7f7 The OpenSSF Package Analysis project identified '@captivateiq/random' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...

Malicious code in @captivateiq/events (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8fc4737a464a63150ee660fef685ac907d15745ab89d4dea2872f3896362f599 The OpenSSF Package Analysis project identified '@captivateiq/events' @ 19.3.9 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-10309 Malicious code in rentez-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d38f5182bdac1a9d1dc8a7edd04bf4887e39416ac443361fbe2b4de7341c0360 The OpenSSF Package Analysis project identified 'rentez-docs' @ 6.6.6 npm as malicious. It is considered malicious because: - The package...

Stop LUCR-3 Attacks: Learn Key Identity Security Tactics in This Expert Webinar

Did you know that advanced threat actors can infiltrate the identity systems of major organizations and extract sensitive data within days? It's a chilling reality, becoming more common and concerning by the day. These attackers exploit vulnerabilities in SaaS and cloud environments, using...

MAL-2024-10305 Malicious code in byted_service_env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b298349a0b9738e608252ef9267c00688e51775569da6d97fde70f4819a2b2b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...