Malicious code in littelbitx0 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 df4d01291bca9ae78e4a70eabaeb7b2729c75ae5a470c4366215657aa9354e2d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in subdomainer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 be979ecd7261fc996ff3007675ba6e59cbdab8da999ab44c937adb5b1a609724 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-7802 Malicious code in @mentoring-services/sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6248cce7fe3e50ce8c9fe940f959d883f287bff1a15d23813fa4dad7f960a486 The OpenSSF Package Analysis project identified '@mentoring-services/sdk' @ 10.20.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-7803 Malicious code in feedback-html2canvas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 59673c0fc4701541ff9cf2002ba260a6cb6429a2b8ed7bd4398362bab5b421b1 The OpenSSF Package Analysis project identified 'feedback-html2canvas' @ 10.20.1 npm as malicious. It is considered malicious because: - The...

MAL-2024-7795 Malicious code in @vertiv-co/ui-library-nextgen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ffbf749ac60481466ea1b80f8cdcf3d84df099b6496876a765054477889570d6 The OpenSSF Package Analysis project identified '@vertiv-co/ui-library-nextgen' @ 10.0.2 npm as malicious. It is considered malicious because: -...

MAL-2024-7796 Malicious code in @vertiv-co/viewer-service-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a42df7da8768f315d6d12eb06fa799e0781561526ae3c71ad21f34b1dfe06411 The OpenSSF Package Analysis project identified '@vertiv-co/viewer-service-library' @ 10.0.15 npm as malicious. It is considered malicious...

MAL-2024-7793 Malicious code in appds-nodejs-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f1ac973f28037939ed23e341eacd9fcc006c3709075045f2d51232131c111977 The OpenSSF Package Analysis project identified 'appds-nodejs-utils' @ 0.2.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in appds-nodejs-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f1ac973f28037939ed23e341eacd9fcc006c3709075045f2d51232131c111977 The OpenSSF Package Analysis project identified 'appds-nodejs-utils' @ 0.2.0 npm as malicious. It is considered malicious because: - The package...

Canarytokens security vulnerability

Canarytokens is an open source web activity tracking system from Thinkst Applied Research. A security vulnerability exists in Canarytokens that stems from a server-side request forgery vulnerability that was discovered in the Webhook alert feature...

MAL-2024-7783 Malicious code in chromestatus-openapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3f0ae839e77574e6fbdeb08227dfe2e2d3be958d34456a8cc4df440988db1e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7781 Malicious code in angular-material-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cc6ec3d00f5ac0565644d0b1fce06bf68473a14b48df88761451345f12c7475c The OpenSSF Package Analysis project identified 'angular-material-panel' @ 1.1.5 npm as malicious. It is considered malicious because: - The...

MAL-2024-7840 Malicious code in testjsonn2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0d75d52ae07c9c9e2e6b773f2806c66631dd764da793bac0559e65bc4d0e7f66 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-ronnyfredd-exfiltr-clipboard Reasons based on the...

MAL-2024-7839 Malicious code in testjsonn1 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d8b57f71eadeb645df871ae41a475cb9a8ba647679e7455f66e0c9e9b5627651 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-ronnyfredd-exfiltr-clipboard Reasons based on the...

MAL-2024-7778 Malicious code in oj-odcs-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a6c15cc75636529a58d1e70b3731207bdde080965ec886c0fa3a651f3d49f58a The OpenSSF Package Analysis project identified 'oj-odcs-common' @ 3.3.0 npm as malicious. It is considered malicious because: - The package...

CVE-2024-37561

creationtimestamp| type| source ---|---|--- 2024-07-20 13:07:33+00:00| seen| Telegram/5Kk8k0O4qjsn37QEX8o3GVGulSq5qZe2jBNlH5G9bFkQ...

Malicious code in @celigo/fuse-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c7e04fe72ce959885707ec66262560851804147d1a6816565ff868c45a652c38 The OpenSSF Package Analysis project identified '@celigo/fuse-ui' @ 9.7.7 npm as malicious. It is considered malicious because: - The package...

Malicious code in fireauth.args (npm)

The package exfiltrates data to an oastify domain. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c601f7d41a9166b7e84595a25e727e5256c0962af730ee336a07eac2b1e7fe40 The OpenSSF Package Analysis project identified 'fireauth.args' @ 71.69.69 npm as malicious. ...

MAL-2024-7774 Malicious code in fe-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f10193d263c551e806779906e66b796c66043d73893719ea555b3c822b27adc4 The OpenSSF Package Analysis project identified 'fe-bootstrap' @ 70.69.69 npm as malicious. It is considered malicious because: - The package...

CVE-2024-6338

creationtimestamp| type| source ---|---|--- 2024-07-19 11:11:29+00:00| seen| https://t.me/cvedetector/1201...

MAL-2024-7772 Malicious code in marvinjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 965b7b4455eec757889260ad7d11671ee747f1d78f5ccca323303d223f246c43 The OpenSSF Package Analysis project identified 'marvinjs' @ 5.5.6 npm as malicious. It is considered malicious because: - The package...