MAL-2024-10353 Malicious code in semi-d2c (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 903534f26ef3e66645d16589e9db352586dcb5630c7b314a5466e66f37e0cfa3 The OpenSSF Package Analysis project identified 'semi-d2c' @ 9.3.5 npm as malicious. It is considered malicious because: - The package...

Malicious code in cml-cloudbase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a7c88cb2d6bbbb7ef7543877d2cfe8b297aeeb594425f0af21936477168ee455 The OpenSSF Package Analysis project identified 'cml-cloudbase' @ 9.3.5 npm as malicious. It is considered malicious because: - The package...

Malicious code in semi-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 05640460dfefb40e49d1b9fcfa054fabedc4ccdff887981a44f2f1e760b23661 The OpenSSF Package Analysis project identified 'semi-design' @ 9.3.5 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10349 Malicious code in @douinfe/semi-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19ca4a86d374c7183a13c8652c4a75b56c62f904cc492c9b61506ef524c9911c The OpenSSF Package Analysis project identified '@douinfe/semi-ui' @ 9.3.5 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10332 Malicious code in nodepaysafesdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 262a38bba91b52950dc38de3cc74144bbd62c1e3026190170176fb2fba6d08de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10331 Malicious code in mixpanelexpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c3835238b933b46ead226a6a905afb3250547ffd233f3efc2f8f9dab538d310c The OpenSSF Package Analysis project identified 'mixpanelexpo' @ 99.99.90 npm as malicious. It is considered malicious because: - The package...

CVE-2024-10523

This vulnerability exists in TP-Link IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the Wi-Fi credentials stored on the vulnerable...

MAL-2024-10324 Malicious code in finsys-webcomponent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cce4759dae5c3e0526e14affa1a1dc24fd8a3f8189dc1c85bfdbb88cde5a7319 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in finsys-webcomponent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cce4759dae5c3e0526e14affa1a1dc24fd8a3f8189dc1c85bfdbb88cde5a7319 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10319 Malicious code in appdynamics-libagent-napi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3ccb8490c24108245e9e5e4893518e881e48f0dafa4b0ad152ab458de4e7b1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @toloka-tb/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c655dc69b310808896f252e5607b9dd8c4bd54b9d139caa655f5816f2269abd4 The OpenSSF Package Analysis project identified '@toloka-tb/core' @ 2.5.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sc-meta-layer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e8afeccfd77a3b36e9c24aa1057807ba8f2a18972791b3cbc857e3d961e60d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10328 Malicious code in sc-meta-layer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e8afeccfd77a3b36e9c24aa1057807ba8f2a18972791b3cbc857e3d961e60d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10329 Malicious code in sc-pattern-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cbcdc7facabe72ef42307c4747ea188fbeec7c3f4f2203bfab0770204dc01c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in creative_design_client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15b9d3a4ef8f0a22d5ff21957427271795b4aa88024b5746a06181ae5918235a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

From Naptime to Big Sleep: Using Large Language Models To Catch Vulnerabilities In Real-World Code

Posted by the Big Sleep team Introduction In our previous post, Project Naptime: Evaluating Offensive Security Capabilities of Large Language Models, we introduced our framework for large-language-model-assisted vulnerability research and demonstrated its potential by improving the state-of-the-a...

Announcing TotalCloud Attack Path, Cloud Workflow Automation, and 3-Step Simplified User Onboarding for Qualys TotalCloud CNAPP

The shift of business applications and infrastructure to the cloud has heightened the need for security teams to manage cyber risks comprehensively, ensuring visibility and control across diverse cloud environments. As organizations increasingly adopt multi-cloud environments, they often find...

MAL-2024-10299 Malicious code in @amagioss/js-timecode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cd0e634cb711f3c81ba053e00875d83653e7f7f70757ace4e3234b538bc5c88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10273 Malicious code in cms-ti-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7100910eea49836b4baf265c4f34b2964d486d5f305a31fc08cb57bf04ce96d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10272 Malicious code in cms-hpti-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e35f9a2795b7a81d170feae4580fb5fab3f60a4f289259701395afe3031d0996 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...