Malicious code in csm-installation-wizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b5bdad9e0b6a88bc81e8ae16cc200d4c4ac3e021b0583309fbc4338574fc64b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

An Analysis of the EU’s Cyber Resilience Act

A good--long, complex--analysis of the EU's new Cyber Resilience Act...

MAL-2024-8977 Malicious code in collaborator-trigger05 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19b4660476331fc41f23ce20381efcebc7f8ba7c11954f491848bff463c7f0b0 The OpenSSF Package Analysis project identified 'collaborator-trigger05' @ 1.0.9 npm as malicious. It is considered malicious because: - The...

MAL-2024-8986 Malicious code in case-result-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53752de38b0f242f1a98e32994dffdc4793390a73bf2685bb38db58aff3156fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8963 Malicious code in common-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 928c83c31f108c60035b2c6c96605de1111ca0ca0faf7fd554e461357801b6cf The OpenSSF Package Analysis project identified 'common-icons' @ 1.0.83 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8961 Malicious code in k0m3g4-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd260efc78494efc57d67f6576d7ae30b8e58e866ee7a3c228692548174c1e19 The OpenSSF Package Analysis project identified 'k0m3g4-test' @ 2.999.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in unguess-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3c0670b47eb6c06abe309a5b09c95182ad516cd5127af1c04f5bc8dea0800994 The OpenSSF Package Analysis project identified 'unguess-react' @ 1.5.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8955 Malicious code in storj-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c29c7e82f958f9ed89af6fc324d687bfe4e15d4b2aa49fee39f5aeeb4eee5583 The OpenSSF Package Analysis project identified 'storj-docs' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Exploit for Server-Side Request Forgery in Lobehub Lobe_Chat

CVE-2024-47066 ★ CVE-2024-47066 LobeChat SSRF PoC ★ Descr...

Alisonic Sibylla

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Alisonic Equipment: Sibylla Vulnerability: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' 2. RISK EVALUATION Successful exploitation of this vulnerability...

Malicious code in dcnm-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60cebc6f07c7ce4ba095946f2ee01997897e8acdaaa926a98ee8c6a66aff97f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Wireshark suffers from a denial of service vulnerability (CNVD-2024-39255)

Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark has a security vulnerability that can be exploited by an attacker to deny service via...

MAL-2024-8936 Malicious code in airwallex-platform-onboarding-sdk-demo-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 503945e9961e51c2bd3819eeedc20ff255058a1873baf46726c646e08f43e2f5 The OpenSSF Package Analysis project identified 'airwallex-platform-onboarding-sdk-demo-react' @ 1.0.0 npm as malicious. It is considered...

Malicious code in tannucolingboys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis be8167659390a471b016dfb0b25a778b2a77374ac31f845966ea70ce799ca081 The OpenSSF Package Analysis project identified 'tannucolingboys' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8932 Malicious code in @the-c-company/common-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e18cae6ce0c3de2fe7988c316471f5383433deaa0e8b9bf0376b69b634188218 The OpenSSF Package Analysis project identified '@the-c-company/common-utils' @ 1.0.0 npm as malicious. It is considered malicious because: - Th...

Malicious code in linear-airbyte-source (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f2f93219b987eadd13a3db8af0914e4ccc9ea3d3fbf6f571e156e5e5861d25c6 The OpenSSF Package Analysis project identified 'linear-airbyte-source' @ 9.9.10 npm as malicious. It is considered malicious because: - The...

MAL-2024-8928 Malicious code in learning_npm1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f3b173b32e267c6a9b7455320bda81f08ce154ad6315aeaea540133a9f0ab232 The OpenSSF Package Analysis project identified 'learningnpm1' @ 100.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8924 Malicious code in randompackage-notreal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f9c2160c65a4352d89013d032c20e0f4cf59a5f34ca2f96baf3aeeca5858a7b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8922 Malicious code in vehicle-optionalproducts-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 52513e322c63383065f4e0e5b8b22dbb1452248d372c74fd463402c7179e5abb The OpenSSF Package Analysis project identified 'vehicle-optionalproducts-ui' @ 99.0.0 npm as malicious. It is considered malicious because: - T...

Malicious code in @energysolutions/mylib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 08f12d3c3e2e99f5bcec121d93fe4ece6a29ff57478e2e93e0cff0d4309832ac The OpenSSF Package Analysis project identified '@energysolutions/mylib' @ 999999999.999999.999999 npm as malicious. It is considered malicious...