MAL-2024-10724 Malicious code in evocateur_libpnpmpublishing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2a0da80461a0fbbd51af9f1ef2a02e83a2b2b49fe352e262ee2c90bdd03b2359 The OpenSSF Package Analysis project identified 'evocateurlibpnpmpublishing' @ 99.3.5 npm as malicious. It is considered malicious because: - Th...

Malicious code in evocateur_libpnpmpublishing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2a0da80461a0fbbd51af9f1ef2a02e83a2b2b49fe352e262ee2c90bdd03b2359 The OpenSSF Package Analysis project identified 'evocateurlibpnpmpublishing' @ 99.3.5 npm as malicious. It is considered malicious because: - Th...

Malicious code in libnpmpublishing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 000ac1f9e3e24873823d90fa6c4785583e0f65c86d7c26847dd8819079f1e6e7 The OpenSSF Package Analysis project identified 'libnpmpublishing' @ 99.3.5 npm as malicious. It is considered malicious because: - The package...

Malicious code in newbharatv2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bccffdbbaea730330c6b6156aac69a4852d53debfa863456e47b3d3cb0c53561 The OpenSSF Package Analysis project identified 'newbharatv2' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in quality-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f01f544d6f653ee39d1d5c68a0b5795305468c31c30f8ed337e10e39387d63e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10713 Malicious code in atlas-query-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c6c37cad26e052e458501d412ce970fc2faf0d3ce12d6e7b5794e6161ab7e4d8 The OpenSSF Package Analysis project identified 'atlas-query-editor' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

MAL-2024-10711 Malicious code in cb-cookie-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e21db163fcf5bd372c2a214576f2018fdca3221ae4ca1a4ed936a02d013c782 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the software for monitoring and analyzing network traffic in industrial networks, SINEC Traffic Analyzer, is related to deficiencies in access control. This vulnerability allows a intruder to gain unauthorized access to protected information.

The vulnerability of the SINEC Traffic Analyzer software for monitoring and analyzing network traffic in industrial networks is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

MAL-2024-10764 Malicious code in opa-fe-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0912f1fa265b4c148d99d5ebf17f99f098efa46a5222a44acee011d8ab0680df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10697 Malicious code in code-analysis-shopee-ui-for-scf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8018baa56ec781ea13151a66ea8d0027c27ec76ea8fcc935bd8eff0e47343104 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babel-plugin-transform-vuex-analysis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 661cbd3eaaae7ee5bb113192279e6ba2e72c5c5363fe668209893a70debd3248 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10759 Malicious code in mkt-snakecase-keys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61e863528bc4c149274dad3b83fb474326e0d0d2ab5134d9529c0099688515e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: WebSphere Application Server Liberty shipped with IBM Operations Analytics - Log Analysis is vulnerable to information disclosure (CVE-2023-50314)

Summary IBM WebSphere Application Server Liberty is vulnerable to information disclosure. Vulnerability Details CVEID:CVE-2023-50314 DESCRIPTION: IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.8 could allow an attacker with access to the network to conduct spoofing attacks. An...

CVE-2019-15858

creationtimestamp| type| source ---|---|--- 2024-11-14 06:07:08+00:00| seen| MISP/be8ee385-5fff-42d1-b092-13a4f1b9f941...

MAL-2024-10758 Malicious code in mdap-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2463538f2c8446c6a068b5eef41b3088105f8292ea4b22e3cec1066ff3822ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10751 Malicious code in listing-uss-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5bdefff07d9e9bd5fa8b0b524652775ca14bf5851937f5fa73f1e783996ad940 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Transforming Threat Actor Research into a Strong Defense Strategy

Transforming Threat Actor Research into a Strong Defense Strategy By James Murphy, Ale Houspanossian, Leandro Velasco LV and Ilya Kolmanovich · November 14, 2024 What does it take to transform threat actor research into detection engineering? If we look at threat intelligence at its core, then we...

MAL-2024-10750 Malicious code in listing-sc-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca7ca721c36f92794765cd58e98883bb502ec8acf998733b4ea78773c9b7868f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10674 Malicious code in listing-devtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9721f8e927e787ea57b202a8a5b29ab1fd0cd530861055ad6a3e36a1c0df8d9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in item-card-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 006fe1ad3ce02c3601d3fc25ac4e132de1092b4bd43cf8011efdfb6aaa0c894c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...