Malicious code in mandrill-api-ruby (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 16f2aff274da86497ad8fe6322b501a1269cd37d3ad40e227f11126aa2da5413 The OpenSSF Package Analysis project identified 'mandrill-api-ruby' @ 6.0.1 rubygems as malicious. It is considered malicious because: - The...

U.S. Authorities Seize 13 Domains Offering Criminal DDoS-for-Hire Services

U.S. authorities have announced the seizure of 13 internet domains that offered DDoS-for-hire services to other criminal actors. The takedown is part of an ongoing international initiative dubbed Operation PowerOFF that's aimed at dismantling criminal DDoS-for-hire infrastructures worldwide. The...

Malicious code in test-test-test-leys-check (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0f1b447a06ae8cd034c08db769374bbc319460cc98a553bfc472d87ca1ef6cc The OpenSSF Package Analysis project identified 'test-test-test-leys-check' @ 9.9.9 pypi as malicious. It is considered malicious because: - The...

MAL-2023-1419 Malicious code in test-test-test-leys-check (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0f1b447a06ae8cd034c08db769374bbc319460cc98a553bfc472d87ca1ef6cc The OpenSSF Package Analysis project identified 'test-test-test-leys-check' @ 9.9.9 pypi as malicious. It is considered malicious because: - The...

sysstat: arithmetic overflow in allocate_structures() on 32 bit systems

An arithmetic overflow issue was discovered in Sysstat on 32-bit systems. The allocatestructures function in sacommon.c insufficiently checks bounds before arithmetic multiplication, allowing an overflow in the size allocated for the buffer representing system activities. The vulnerability can be...

MAL-2023-1264 Malicious code in paycom-events (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c80a2de08068c1bfcccc84d1061f40232d518c725dc774ab6ed2f73e25753978 The OpenSSF Package Analysis project identified 'paycom-events' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in @clearing/noway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2592ca80858a15f7d2ec802616917732b71bc4ad3e71d19b5bc2e0839a586364 The OpenSSF Package Analysis project identified '@clearing/noway' @ 10.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1078 Malicious code in @clearing/noway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2592ca80858a15f7d2ec802616917732b71bc4ad3e71d19b5bc2e0839a586364 The OpenSSF Package Analysis project identified '@clearing/noway' @ 10.0.0 npm as malicious. It is considered malicious because: - The package...

ALSA-2023:2234 Moderate: sysstat security and bug fix update

The sysstat packages provide the sar and iostat commands. These commands enable system monitoring of disk, network, and other I/O activity. Security Fixes: sysstat: arithmetic overflow in allocatestructures on 32 bit systems CVE-2022-39377 For more details about the security issues, including the...

Dragon Breath APT Group Using Double-Clean-App Technique to Target Gambling Industry

An advanced persistent threat APT actor known as Dragon Breath has been observed adding new layers of complexity to its attacks by adopting a novel DLL side-loading mechanism. "The attack is based on a classic side-loading attack, consisting of a clean application, a malicious loader, and an...

MAL-2023-771 Malicious code in serverless-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c89475cfcb2e297c9055323646693ea6dd4a4b4f744b2802c608fdb86f04be92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-9 Malicious code in sagemakertransformers (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c11f5b4aed6b109392ec1e8837e14a1948f90d65986a7555511b0dd2cb2f479 The OpenSSF Package Analysis project identified 'sagemakertransformers' @ 0.0.3 pypi as malicious. It is considered malicious because: - The...

Malicious code in back-alley (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 83d1eb07b6ba84ecc98bdd4ad2a1313b540e69509c08d8d66f4b2fe54a1986a7 The OpenSSF Package Analysis project identified 'back-alley' @ 1.1.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1120 Malicious code in back-alley (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 83d1eb07b6ba84ecc98bdd4ad2a1313b540e69509c08d8d66f4b2fe54a1986a7 The OpenSSF Package Analysis project identified 'back-alley' @ 1.1.0 npm as malicious. It is considered malicious because: - The package...

CVE-2023-21496

Active Debug Code vulnerability in ActivityManagerService prior to SMR May-2023 Release 1 allows attacker to use debug function via setting debug level...

CVE-2023-21488

Improper access control vulnerablility in Tips prior to SMR May-2023 Release 1 allows local attackers to launch arbitrary activity in Tips...

Improper access control

Improper access control vulnerablility in Tips prior to SMR May-2023 Release 1 allows local attackers to launch arbitrary activity in Tips...

MAL-2023-1177 Malicious code in eu.tsystems.mms.tic.testerra.plugins.azuredevops.tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3ba3635b5a021d627f0f232cf46f53846cc953c75659700eae5ee919ebfca455 The OpenSSF Package Analysis project identified 'eu.tsystems.mms.tic.testerra.plugins.azuredevops.tests' @ 1.0.0 npm as malicious. It is...

MAL-2023-1124 Malicious code in bitshares-ui-style-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 429c86abce3dc07c32dc57d2f69b0a211675f08c5f2043d0ea8d67210c004995 The OpenSSF Package Analysis project identified 'bitshares-ui-style-guide' @ 1.0.3 npm as malicious. It is considered malicious because: - The...

MAL-2023-1270 Malicious code in postaggingcorenlp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b30a154de5e7685f533a68a9ed3e6b7e0e3e577fb28781fcb408f0ac480e95d The OpenSSF Package Analysis project identified 'postaggingcorenlp' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...