MAL-2023-1147 Malicious code in coveo.analytics-fts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6043a9b37b40dc82161ee17610e0b57801c116d25e9164912ac9352ab55c9c00 The OpenSSF Package Analysis project identified 'coveo.analytics-fts' @ 2.0.0 npm as malicious. It is considered malicious because: - The packag...

Malicious code in highchartexport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c99d834722df303b742ebffe5d345a2ad2fd3858c927a36bbd8252f2ed0a3ea1 The OpenSSF Package Analysis project identified 'highchartexport' @ 150.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1215 Malicious code in itemsselector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 607e39766ebd77980775c45bf29b7b5ce6a18704c30bd4e722cde47b95d53b0b The OpenSSF Package Analysis project identified 'itemsselector' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in highchartsofflineexport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 56b77fcce628a512104cc7c6e01e42f19e4f763ba48088ba71ada5bc80971b60 The OpenSSF Package Analysis project identified 'highchartsofflineexport' @ 100.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1201 Malicious code in highchartsofflineexport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 56b77fcce628a512104cc7c6e01e42f19e4f763ba48088ba71ada5bc80971b60 The OpenSSF Package Analysis project identified 'highchartsofflineexport' @ 100.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1105 Malicious code in @satsuitesdk/score-choice-policy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13b7a2826acee9e7a7baa9fc7b0862136ceff1009f5c59474b93511a266abd1e The OpenSSF Package Analysis project identified '@satsuitesdk/score-choice-policy' @ 0.1.2 npm as malicious. It is considered malicious because:...

MAL-2023-944 Malicious code in vpro-mediaplayer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ed2e12118ca2a2e35f3af42a283f6d9bf5384da13060dabd5ab90e220e94544 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

People's Republic of China State-Sponsored Cyber Actor Living off the Land to Evade Detection

Summary The United States and international cybersecurity authorities are issuing this joint Cybersecurity Advisory CSA to highlight a recently discovered cluster of activity of interest associated with a People’s Republic of China PRC state-sponsored cyber actor, also known as Volt Typhoon...

Malicious code in grpc-web-devtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd95e8ffd2ce1c0ead89d2a5e832f9907583b1642bf8a0df83ca3ed78a09752d The OpenSSF Package Analysis project identified 'grpc-web-devtools' @ 0.1.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in yelp-js-error-reporting-init-error-reporting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b0ef31127203cf701c7aa890cdebf10454c53c989cb98015927e9b62881c7bf6 The OpenSSF Package Analysis project identified 'yelp-js-error-reporting-init-error-reporting' @ 19.20.20 npm as malicious. It is considered...

MAL-2023-1349 Malicious code in yelp-js-error-reporting-init-error-reporting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b0ef31127203cf701c7aa890cdebf10454c53c989cb98015927e9b62881c7bf6 The OpenSSF Package Analysis project identified 'yelp-js-error-reporting-init-error-reporting' @ 19.20.20 npm as malicious. It is considered...

MAL-2023-1136 Malicious code in client-ws-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 32231907789db551e533776ab68a4a01f4029a0723291d70d65927559eb647d2 The OpenSSF Package Analysis project identified 'client-ws-app' @ 5.20.20 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1169 Malicious code in ee-cloud-functions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81e2426558f083dcdd4aade89e23d39e99ff609b2ec96c53490a9cd4927f98d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in payouts-sdk-samples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f3db91ea244189b9afd98f67f2aa7ce4dd00812c2ab83bba670a7f9d285cf167 The OpenSSF Package Analysis project identified 'payouts-sdk-samples' @ 99.20.20 npm as malicious. It is considered malicious because: - The...

CVE-2023-28409

creationtimestamp| type| source ---|---|--- 2023-05-23 07:25:13+00:00| seen| https://t.me/cibsecurity/64593 2025-02-01 17:28:09+00:00| seen| Telegram/5lr2IKa3gNDgIkaLTShCQIx5dop4J52eMKRLTF99Iqh-rjoy...

PyPI Repository Under Attack: User Sign-Ups and Package Uploads Temporarily Halted

The maintainers of Python Package Index PyPI, the official third-party software repository for the Python programming language, have temporarily disabled the ability for users to sign up and upload new packages until further notice. "The volume of malicious users and malicious projects being...

MAL-2023-1383 Malicious code in opencv-keras (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1f3dbc8704eb128ec656854e38ccd3c45d1232978eed378bb7711837dddd09bf The OpenSSF Package Analysis project identified 'opencv-keras' @ 17.10.13 pypi as malicious. It is considered malicious because: - The package...

Malicious code in sqlalchemy-os (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e9079084215abb63a9468cc5ba89b5275afec40b081f77e9518498eb56a0c30 The OpenSSF Package Analysis project identified 'sqlalchemy-os' @ 14.0.10 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1394 Malicious code in pylint-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3445cee4e2fd4e4e0170f04b51b2a3409af7c1b2478609a38bcc46d5094e134d The OpenSSF Package Analysis project identified 'pylint-py' @ 15.0.3 pypi as malicious. It is considered malicious because: - The package...

Malicious code in pylint-beautifulsoup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c3646b7e949a863983491259c105cde8b1ff0229781276a5ea22360c75440c5e The OpenSSF Package Analysis project identified 'pylint-beautifulsoup' @ 3.12.3 pypi as malicious. It is considered malicious because: - The...