MAL-2023-8651 Malicious code in lodestone (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c5569d9f5d17acc6330446faa4b9f8eff7b389a4cde9698946b8473c5bd8e74e The OpenSSF Package Analysis project identified 'lodestone' @ 0.0.58 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-8650 Malicious code in ui-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e93713e0954987e046a76dc0d8345dbc4f887ac8d87d55c593ce1f4ebb01bbdf The OpenSSF Package Analysis project identified 'ui-header' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8647 Malicious code in npm_package_dependencies_base_64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 57186be5c8cb34ac2917add3d88f89585c606a2b3cf4628030694c46c5f5ba27 The OpenSSF Package Analysis project identified 'npmpackagedependenciesbase64' @ 2.0.0 npm as malicious. It is considered malicious because: - T...

Malicious code in npm_package_devdependencies__types_jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5f8a28159fb1b2ef33b43e4aa71b0c85879d6220009091751cfa1590a1900329 The OpenSSF Package Analysis project identified 'npmpackagedevdependenciestypesjest' @ 30.5.0 npm as malicious. It is considered malicious...

Malicious code in yetibarbar_plug (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4c26573e1e915f00ad980599539d1a9a04737c0264c7a7366cf0b7a88a92df08 The OpenSSF Package Analysis project identified 'yetibarbarplug' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8638 Malicious code in discord-sounds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd6b0c891e0a48196a53cec18f1cce102281436e4acbf4a45af7444166378496 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8629 Malicious code in lc-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d918d66169ac2696569bb389d82b0b95640986fdc77ab8cec9639908d156d0c5 The OpenSSF Package Analysis project identified 'lc-config' @ 5.5.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8623 Malicious code in simple-autocomplete-dropdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ae96f59d7d614e3321cbab4516936e0500129be54888468ac309eaf1ad2269ed The OpenSSF Package Analysis project identified 'simple-autocomplete-dropdown' @ 3.7.14 npm as malicious. It is considered malicious because: -...

Malicious code in dropdown-input (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2d336f300d1cbb10697762ccb19e2efa75d88c7a9f180ca4e472b6861b6d5ca0 The OpenSSF Package Analysis project identified 'dropdown-input' @ 3.4.15 npm as malicious. It is considered malicious because: - The package...

Malicious code in vivo-packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ddc60ba6935a3a4569ba5dec15c6cf00eb68779bc86d09178839c459ffb15de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Transform Your Data Security Posture – Learn from SoFi's DSPM Success

As cloud technology evolves, so does the challenge of securing sensitive data. In a world where data duplication and sprawl are common, organizations face increased risks of non-compliance and unauthorized data breaches. Sentra's DSPM Data Security Posture Management emerges as a comprehensive...

Malicious code in pillar-lifi-zap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f6752cdfc26aa682f3cbce0cfb7c709c97f885cbfae33367ffa76e599a041393 The OpenSSF Package Analysis project identified 'pillar-lifi-zap' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Attacks, Vulnerabilities and Actors 20 November to 26 November 2023

For a detailed threat digest, download the pdf file here Summary HiveForce Labs has recently made several significant discoveries related to cybersecurity threats. Over the past week, we identified a total of eight executed attacks, six instances of adversary activity, and one exploited...

MAL-2023-8619 Malicious code in oddsfire-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6560345fe7b94e452865d383a96b49b27e71c7113505ddfd5306218da9648d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in moonpig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bf064eedf0d80bc14ce31e1deee2fd824472437a9fa79fb15602d6b09c478d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-49103

creationtimestamp| type| source ---|---|--- 2023-11-22 17:10:53+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5912 2023-11-23 07:46:50+00:00| published-proof-of-concept| https://t.me/proxybar/1841 2023-11-23 09:27:42+00:00| seen|...

MAL-2023-8593 Malicious code in discord.js-ytsong (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e2a418dfc51b91035c5d81a2c0db02d6b1046f551e8ef927489b47196cc3e8d0 The OpenSSF Package Analysis project identified 'discord.js-ytsong' @ 3.4.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in discord.js-ytsong (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e2a418dfc51b91035c5d81a2c0db02d6b1046f551e8ef927489b47196cc3e8d0 The OpenSSF Package Analysis project identified 'discord.js-ytsong' @ 3.4.2 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8563 Malicious code in azureml-contrib-daskonbatch (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fbb97c227c663215810abd8867643e6709416bf4e16526391cc0c740f9dce047 The OpenSSF Package Analysis project identified 'azureml-contrib-daskonbatch' @ 1.0.0 pypi as malicious. It is considered malicious because: - T...

Malicious code in pod-financier-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25becd0bffc0a2685831f2227d4ee97a1b406d60a899f7c683bfb4fa5af4e1f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...