MAL-2025-6880 Malicious code in cloudflare-agent-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 073c16b7f6f9d6ba8d94458e7efa756a07cfcc78cefbda3ed218097358812980 The OpenSSF Package Analysis project identified 'cloudflare-agent-starter' @ 99.99.99 npm as malicious. It is considered malicious because: - Th...

Security Updates for Azure File Sync Agent (August 2025)

The Microsoft Azure File Sync Agent running on the remote host is prior to 18.3, 19.x prior to 19.2, 20.x prior to 20.1, or 21.x prior to 21.1. It is, therefore affected by an elevation of privilege vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the...

Malicious code in @frozen-team/rp-agent-js-codecept (npm)

The package @frozen-team/rp-agent-js-codecept was found to contain malicious code...

MAL-2025-34336 Malicious code in synced-plus-agent (npm)

The package synced-plus-agent was found to contain malicious code...

Malicious code in squirrelmon_agent (npm)

The package squirrelmonagent was found to contain malicious code...

Malicious code in synced-plus-agent (npm)

The package synced-plus-agent was found to contain malicious code...

MAL-2025-35250 Malicious code in test-mlw2-duped-winds-agent-lezzy (npm)

The package test-mlw2-duped-winds-agent-lezzy was found to contain malicious code...

MAL-2025-7945 Malicious code in @frozen-team/rp-agent-js-codecept (npm)

The package @frozen-team/rp-agent-js-codecept was found to contain malicious code...

MAL-2025-23223 Malicious code in infra-kafka-agent (npm)

The package infra-kafka-agent was found to contain malicious code...

Malicious code in test-mlw2-duped-winds-agent-lezzy (npm)

The package test-mlw2-duped-winds-agent-lezzy was found to contain malicious code...

MAL-2025-9730 Malicious code in @zalastax/nolb-_agt (npm)

The package @zalastax/nolb-agt was found to contain malicious code...

MAL-2025-40221 Malicious code in yandex-useragent (npm)

The package yandex-useragent was found to contain malicious code...

CVE-2025-9039 Information Disclosure in Amazon ECS Container Agent

We identified an issue in the Amazon ECS agent where, under certain conditions, an introspection server could be accessed off-host by another instance if the instances are in the same security group or if their security groups allow incoming connections that include the port where the server is...

CVE-2025-3831

Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties...

Unleashing Agentic AI for Superior Threat-Informed Risk Prioritization with Agent Nyra

The cybersecurity landscape evolves relentlessly, with new adversaries and threats emerging daily. For organizations navigating these challenges, reactive responses are no longer enough. It’s about moving from complex, disconnected data streams to proactive, autonomous solutions with actionable...

CVE-2025-7353 Rockwell Automation ControlLogix® Ethernet Remote Code Execution Vulnerability

A security issue exists due to the web-based debugger agent enabled on Rockwell Automation ControlLogix® Ethernet Modules. If a specific IP address is used to connect to the WDB agent, it can allow remote attackers to perform memory dumps, modify memory, and control execution flow...

CVE-2025-7353

CVE-2025-7353 affects Rockwell Automation ControlLogix Ethernet Modules via the web-based debugger agent (WDB). The connected PT-2025-33275 entry specifies affected software versions pre-12.001 and explains that connecting to the WDB agent from a specific IP can enable remote attackers to perform...

CVE-2024-7402

Netskope has identified a potential gap in its agent Netskope Client in which a malicious insider can potentially tamper the Netskope Client configuration by performing MITM Man-in-the-Middle activity on the Netskope Client communication channel. A successful exploitation would require...

CVE-2024-7402 Netskope Client Configuration Tampering with Local MITM

Netskope has identified a potential gap in its agent Netskope Client in which a malicious insider can potentially tamper the Netskope Client configuration by performing MITM Man-in-the-Middle activity on the Netskope Client communication channel. A successful exploitation would require...

CVE-2024-7402 Netskope Client Configuration Tampering with Local MITM

Netskope has identified a potential gap in its agent Netskope Client in which a malicious insider can potentially tamper the Netskope Client configuration by performing MITM Man-in-the-Middle activity on the Netskope Client communication channel. A successful exploitation would require...