MAL-2024-10409 Malicious code in x2vmlgml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 83c3524199594df2a9cfa9a2fc3cb16b03e48c2e6abd67c8fc06b7a5d92d75dd A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in laghtseq (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 20f5a547a9a50422f27bf42eff38ceaa91f0a3d3949c4c3d1934769172fb028c A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Security Bulletin: IBM Operations Analytics - Log Analysis is vulnerable to an XML External Entity Injection (XXE) vulnerability

Summary There is a potential XML External Entity Injection XXE vulnerability with reload4j library that is used in IBM Operations Analytics - Log Analysis. This has been addressed. Vulnerability Details IBM X-Force ID: 294027 DESCRIPTION: QOS.CH reload4j allow a remote attacker to obtain sensitiv...

MAL-2024-10478 Malicious code in code-analysis-ts-for-sellercenter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74562e2ce31e022d691644a9e71592ee149d99d6988a02f47bd35197d549c1f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chat-history-log-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ede6c0203c0d5dfabc8b0ffe97bd7018474fd422452219e3554818ea925ffe7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10476 Malicious code in case-dispute-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67fde58085d55461a9612067c94598825097d9cf29ac90c5a232a9814f55314b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10386 Malicious code in tcms-malicious-package-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ecdca9c2ba1dc4fbd690b4af252ead04f9b81254e6951c5688da537a34156b45 The OpenSSF Package Analysis project identified 'tcms-malicious-package-test' @ 1.0.0 npm as malicious. It is considered malicious because: - Th...

MAL-2024-10378 Malicious code in emtoolsjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7321939016853a0b9d475c175446320711a796542c1bad74fc3efe93fc4a956 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in api-cache-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cc9bdde57f4e80ca9647c2385d252071a1779d2ed98dee773977bac933149638 The OpenSSF Package Analysis project identified 'api-cache-worker' @ 6.1.3 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10379 Malicious code in @common-pattern/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 22ade4254f9af0310378acce0750c95eaba714619e5cda80c46ca9226d3c2b22 The OpenSSF Package Analysis project identified '@common-pattern/components' @ 8.2.9 npm as malicious. It is considered malicious because: - The...

MAL-2024-10368 Malicious code in byteseep (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dcee5204a425aa98a98071c8eee88e547f7570e05c72c9e18f01477a0b044794 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10370 Malicious code in nerst (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ac5aa6644938e09002e1da1848fe502aad6e6f7c7733210529238eacd6bfb5a0 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10373 Malicious code in nurst (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ebc947e96588d0b0b3e06e9a4be04b7f86c8dedf4716471a19bf7c1c20144cbf A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in nurst (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ebc947e96588d0b0b3e06e9a4be04b7f86c8dedf4716471a19bf7c1c20144cbf A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10358 Malicious code in lightseeq (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3d14d6932bfe1a879a7af0d37aa99c04a96678783d745e6587d5c95c39086e09 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in chameleon-sdk-android (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 589be22e021ff78ea28c1042adb0a595cec7ba04c5c4050009471dcd91d7de2c The OpenSSF Package Analysis project identified 'chameleon-sdk-android' @ 9.3.5 npm as malicious. It is considered malicious because: - The...

MAL-2024-10353 Malicious code in semi-d2c (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 903534f26ef3e66645d16589e9db352586dcb5630c7b314a5466e66f37e0cfa3 The OpenSSF Package Analysis project identified 'semi-d2c' @ 9.3.5 npm as malicious. It is considered malicious because: - The package...

Malicious code in cml-cloudbase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a7c88cb2d6bbbb7ef7543877d2cfe8b297aeeb594425f0af21936477168ee455 The OpenSSF Package Analysis project identified 'cml-cloudbase' @ 9.3.5 npm as malicious. It is considered malicious because: - The package...

Malicious code in semi-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 05640460dfefb40e49d1b9fcfa054fabedc4ccdff887981a44f2f1e760b23661 The OpenSSF Package Analysis project identified 'semi-design' @ 9.3.5 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10349 Malicious code in @douinfe/semi-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19ca4a86d374c7183a13c8652c4a75b56c62f904cc492c9b61506ef524c9911c The OpenSSF Package Analysis project identified '@douinfe/semi-ui' @ 9.3.5 npm as malicious. It is considered malicious because: - The package...