MAL-2024-148 Malicious code in cagov-template-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a3e81e15d59085cf12a3a46a1dc253df8e81c9ff8756d76f8ab9db14b82caab8 The OpenSSF Package Analysis project identified 'cagov-template-v6' @ 9.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-147 Malicious code in sample-schema-mgmt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4ef77c3bb30fb8fc7dc5c8e999eb9187db74dca1d1a5dc38068c32b54ae508b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-146 Malicious code in vscode-mlir (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c610eb26b75afffa49527255692e967a24bbe7fd61242d8c2f45420c72d9b589 The OpenSSF Package Analysis project identified 'vscode-mlir' @ 2.0.1 npm as malicious. It is considered malicious because: - The package execut...

MAL-2024-145 Malicious code in materialxtest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98caac4513156692e87224323de637a922a6802ab80e04a0b3ceeceb8602764a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-137 Malicious code in froxlor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 445e6f97a516e090b04dc5969fbc1472e2c740461dec0b7769bbe76e5d3b6326 The OpenSSF Package Analysis project identified 'froxlor' @ 19.0.4 npm as malicious. It is considered malicious because: - The package...

MAL-2024-135 Malicious code in siif_components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2304aeb0d32868f4f2b4f1b3cc9c6fe5d8109d9a14029cbaab0d947287e9686f The OpenSSF Package Analysis project identified 'siifcomponents' @ 7.0.5 npm as malicious. It is considered malicious because: - The package...

Free access to ThreatDown Application Block: Elevate your Windows security at no cost

Malwarebytes continues to add value to its ThreatDown Bundles with the inclusion of Application Block as free for all ThreatDown Nebula accounts excluding Mobile only accounts. Users dont need to activate this new feature: the policy has been enabled in their account by default. For as many...

Malicious code in storefront_h5_sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f7c0d65d6fdf4ca9a7677bce242a39f89c488703b532de05acb574c7baa799e3 The OpenSSF Package Analysis project identified 'storefronth5sdk' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-132 Malicious code in storefront_h5_sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f7c0d65d6fdf4ca9a7677bce242a39f89c488703b532de05acb574c7baa799e3 The OpenSSF Package Analysis project identified 'storefronth5sdk' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-131 Malicious code in pd-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b46ebcb2f76102916a1ab764b5af360b8c6cdd1dc56a269538132bcc4e307983 The OpenSSF Package Analysis project identified 'pd-ui-kit' @ 1.5.1 npm as malicious. It is considered malicious because: - The package...

New Microsoft Incident Response guides help security teams analyze suspicious activity

Today Microsoft Incident Response are proud to introduce two one-page guides to help security teams investigate suspicious activity in Microsoft 365 and Microsoft Entra. These guides contain the artifacts that Microsoft Incident Response hunts for and uses daily to provide our customers with...

CVE-2023-35995

creationtimestamp| type| source ---|---|--- 2024-01-16 21:16:18+00:00| seen| https://t.me/ctinow/168996...

CVE-2023-52108

Vulnerability of process priorities being raised in the ActivityManagerService module. Successful exploitation of this vulnerability will affect availability...

MAL-2024-110 Malicious code in testing-dep-collab-obsfucated (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c5a66859a22b9608532f75d7748aee57740c8699a9204d441db0e1104e1c4c50 The OpenSSF Package Analysis project identified 'testing-dep-collab-obsfucated' @ 1.0.0 npm as malicious. It is considered malicious because: -...

Malicious code in testing-dep-collab-obsfucated (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c5a66859a22b9608532f75d7748aee57740c8699a9204d441db0e1104e1c4c50 The OpenSSF Package Analysis project identified 'testing-dep-collab-obsfucated' @ 1.0.0 npm as malicious. It is considered malicious because: -...

MAL-2024-102 Malicious code in testing-burp-library-please-ignore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2249726c84e729bde202820bcc2ac6cdfaec65115b09e7505b33a51158988aad The OpenSSF Package Analysis project identified 'testing-burp-library-please-ignore' @ 1.0.0 npm as malicious. It is considered malicious becaus...

MAL-2024-92 Malicious code in wdpr-device-detection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e68ddd57d0cced6084c7770f4e48230e223d896f927b8952e4cf5d05caa721f The OpenSSF Package Analysis project identified 'wdpr-device-detection' @ 24.7.16 npm as malicious. It is considered malicious because: - The...

MAL-2024-96 Malicious code in wdpr-node-http-error-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4afec8bd883f6042f7047f6b0d29cd37d57ef2e6f179a717a0ee7bbf44a16fe8 The OpenSSF Package Analysis project identified 'wdpr-node-http-error-handler' @ 16.1.1 npm as malicious. It is considered malicious because: -...

MAL-2024-98 Malicious code in wdpr-node-pep-crypto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f9d5e213e80933d680524f066a4ad66ff4bc1315eac94204012f610698f356ff The OpenSSF Package Analysis project identified 'wdpr-node-pep-crypto' @ 2.0.7 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-95 Malicious code in wdpr-node-conversation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13bac8c43485c160298a14b6d17e48f8a18cf34bf9b2f1c73b77cc45a82b577b The OpenSSF Package Analysis project identified 'wdpr-node-conversation' @ 2.3.3 npm as malicious. It is considered malicious because: - The...