10122 matches found
MAL-2023-8554 Malicious code in ory-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10ee2bc9e167728f46f301228a2569bcd7eda2f19c27f24784dd4497cf1af3be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ory-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10ee2bc9e167728f46f301228a2569bcd7eda2f19c27f24784dd4497cf1af3be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in basegulpfile (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 059ea7a541217919c3a9813f74ff60d917771f2dcd25ce7dee9fb33fc964d16c The OpenSSF Package Analysis project identified 'basegulpfile' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2023-8551 Malicious code in basegulpfile (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 059ea7a541217919c3a9813f74ff60d917771f2dcd25ce7dee9fb33fc964d16c The OpenSSF Package Analysis project identified 'basegulpfile' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in wehackreposss (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 886efcb413ccb918dc087a951fa61416e8b1175b0ea3009a4e273b62067fe385 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8541 Malicious code in discord.js-song (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 90ad9bfacffe2ec987335c33f6ec3024291b2cc98ae356cbc0f16a4051ec79b9 The OpenSSF Package Analysis project identified 'discord.js-song' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...
LummaC2 Malware Deploys New Trigonometry-Based Anti-Sandbox Technique
The stealer malware known as LummaC2 aka Lumma Stealer now features a new anti-sandbox technique that leverages the mathematical principle of trigonometry to evade detection and exfiltrate valuable information from infected hosts. The method is designed to "delay detonation of the sample until...
The dark side of Black Friday: decoding cyberthreats around the year’s biggest shopping season
As the annual Black Friday approaches, the digital landscape experiences an unprecedented surge in e-commerce and online shopping activity. Major sales aside, e-commerce is still a huge market. In 2022, global e-commerce retail revenue was estimated to reach $5.7 trillion worldwide, marking nearl...
GHSA-QJMX-Q5M4-XQF5 Cross-site Scripting in OpenCRX
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field...
GHSA-5PHW-6G3R-55XX Cross-site Scripting in OpenCRX
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation...
Cross-site Scripting in OpenCRX
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field...
Cross-site Scripting in OpenCRX
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation...
GHSA-MFP5-VH58-3J3R Cross-site Scripting in OpenCRX
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number...
Cross-site Scripting in OpenCRX
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number...
CVE-2023-40809
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number...
CVE-2023-40813
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation...
CVE-2023-40813
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation...
CVE-2023-40816
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field...
