Malicious code in uuid-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 67e9eea857d57488a09639cf7c62b2507c6f72aa291543d524e2dd9a86532a73 The OpenSSF Package Analysis project identified 'uuid-utils' @ 10.10.11 npm as malicious. It is considered malicious because: - The package...

Elevate Your Container Security with QScanner in 2025

Securing container images is more important than ever in the dynamic world of cloud-native technologies. Organizations have long utilized reliable solutions from Qualys to scan their images, ensuring applications run smoothly and securely. These tools have played a crucial role in maintaining the...

Malicious code in xgplay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fc40998dbfce7312db293c7404a1a116ea529846512149b891592e0920049e35 The OpenSSF Package Analysis project identified 'xgplay' @ 89.3.5 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2024-10469 Malicious code in daumu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d37e522b955b76b0e14a598bb86fa4057377c13ddfc51a8741a10957281602c8 The OpenSSF Package Analysis project identified 'daumu' @ 89.3.5 npm as malicious. It is considered malicious because: - The package communicate...

Malicious code in xgplayre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c92188f0f7a497175f8ee0edc3d1ba5a6fbef5fb82b9205d9ff0e7c03408ee5f The OpenSSF Package Analysis project identified 'xgplayre' @ 89.3.5 npm as malicious. It is considered malicious because: - The package...

Malicious code in @bytedanc-ad/mui-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 91a2d4c3edc0b12c58d88c7087781cde9cc59dd64bad30da86b31a489fdc2753 The OpenSSF Package Analysis project identified '@bytedanc-ad/mui-vue3' @ 89.3.5 npm as malicious. It is considered malicious because: - The...

MAL-2024-10467 Malicious code in @bytedanc-ad/mui-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 91a2d4c3edc0b12c58d88c7087781cde9cc59dd64bad30da86b31a489fdc2753 The OpenSSF Package Analysis project identified '@bytedanc-ad/mui-vue3' @ 89.3.5 npm as malicious. It is considered malicious because: - The...

Malicious code in @bytedanc-ad/mui-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b302cda103ab4e9d60bced8da79df7126ab12cceee30b5ca171d20bc10c1a77 The OpenSSF Package Analysis project identified '@bytedanc-ad/mui-react' @ 89.3.5 npm as malicious. It is considered malicious because: - The...

MAL-2024-10465 Malicious code in @bytedanc-ad/mui-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b302cda103ab4e9d60bced8da79df7126ab12cceee30b5ca171d20bc10c1a77 The OpenSSF Package Analysis project identified '@bytedanc-ad/mui-react' @ 89.3.5 npm as malicious. It is considered malicious because: - The...

Bosch Rexroth IndraDrive

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service, rendering the device unresponsive by sending arbitrary UDP messages. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of...

Malicious code in eslint-config-finance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d12427cc293ba0b610fa9341045e6d546b05be734e8b9b3135136720e183f04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10486 Malicious code in eslint-config-finance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d12427cc293ba0b610fa9341045e6d546b05be734e8b9b3135136720e183f04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eds-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 274d7cb9ce95b52c1349a7b6ffa0bd0629443ccc2709e4abddeaeed143443ee5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

New Stealer Uses Invalid Cert To Compromise Systems

New Stealer Uses Invalid Cert To Compromise Systems By Mohinder Gill, Mallikarjun Wali and Sangram Mohapatro · November 07, 2024 A new Stealer has been making the rounds. Its name: Fickle. Fickle Stealer is a new Rust-based information stealer that spreads through various attack vectors, includin...

Malicious code in language-matlab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c3bff0146045d9130d2bb2523e15b9f1e582a33f6ba1e2a33524ffe5bb05732 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10490 Malicious code in language-matlab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c3bff0146045d9130d2bb2523e15b9f1e582a33f6ba1e2a33524ffe5bb05732 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in usss (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 252cdf6830dae64423e603510c0465768ef7d1134896697f352a8949c12d5c2c A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in distpro (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 de27f9cd4056d9690ff7216c49b592b22c4059955b71708cf12783c072da64da A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in raylinks (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5bbc9e99f85f6f16d26609cd46995924994ad4e3d01fccd9d23cd5d34f4abf32 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10445 Malicious code in batchran (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 19ed06a25f8868beb5f8e987240e85eaff57b5c995a393fbaa3ff7c517654e8c A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...