MAL-2024-10670 Malicious code in hubot-hangouts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a411a5e1860f7c3e70679f26150c8bc5300c4e1545d0b6e53e9794171a5529a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Your AppSec Journey Demystified: Driving Effective API Security with Wallarm and StackHawk

There is no doubt that attackers have shifted their attention to APIs. Wallarm’s API ThreatStats research identifies that 70% of attacks now target APIs instead of Web Applications. While APIs have become the backbone of innovation and connectivity for businesses, they have also introduced a vast...

MAL-2024-10654 Malicious code in themes-nunjucks-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 06e52365ba2a31a6a5b42155ec0c00fcfe7567016e44255acd479ed14c87ddd4 The OpenSSF Package Analysis project identified 'themes-nunjucks-service' @ 1.2.0 npm as malicious. It is considered malicious because: - The...

Malicious code in @sportdigi/bootstrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 606eac7e59a098b487b61377214416850ff371fc507eb544c97622670ff87dc8 The OpenSSF Package Analysis project identified '@sportdigi/bootstrapper' @ 12.1.2 npm as malicious. It is considered malicious because: - The...

MAL-2024-10652 Malicious code in @ps-i18/i18-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 262dc184a4159c2a1a26d9f3316074336c0ab00d4fae7ce82864cb736106ecb2 The OpenSSF Package Analysis project identified '@ps-i18/i18-utils' @ 1.2.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10666 Malicious code in export-pruner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86e2f312ed9fbfa3af3855f0f17ba52946628c78e0176ec0f9c5a7ed8f2ce8ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10631 Malicious code in hackerone000001 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8afd5e171e8a45a3d333e0d64cf1376ee51009fa4b030aaecd0437111bc57b10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10629 Malicious code in hodkasia01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fb637e3836cd2591e09eb9f418dd4a919c7fae2c9ba94291565e186d6634e3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-unusedvar-fix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2a5ddb66be17d69ec5984d63784684b3865c8a316f79aef7f59107336182947 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Microsoft Patch Tuesday, November 2024 Edition

Microsoft today released updates to plug at least 89 security holes in its Windows operating systems and other software. November's patch batch includes fixes for two zero-day vulnerabilities that are already being exploited by attackers, as well as two other flaws that were publicly disclosed...

Exploit for CVE-2024-32640

CVE-2024-32640 MySQL Blind SQL Injection Proof of Concept Thi...

Malicious code in eslint-plugin-cognitive-complexity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a22d9cacdbec9aeec6abcf59091621abc9b7b7a01842cc8aa6b86418c062417 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

kernel: out-of-bounds read in pci_dev_for_each_resource()

An out-of-bounds read flaw was found in pcidevforeachresource in the Linux Kernel. The pointer in the pcidevforeachresource may be wrong. For example, it might be used for the out-of-bounds read. This issue was identified by the Coverity static analysis tool, which flagged a pointer res that coul...

Malicious code in bytes-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 52ffd94abfbfd2f2e971d55c6e01e3fa3ef3fa60ecd7d609df30f438fccd6bec The OpenSSF Package Analysis project identified 'bytes-guide' @ 99.3.5 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10599 Malicious code in bytes-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 52ffd94abfbfd2f2e971d55c6e01e3fa3ef3fa60ecd7d609df30f438fccd6bec The OpenSSF Package Analysis project identified 'bytes-guide' @ 99.3.5 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10601 Malicious code in magic-porta1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 99c7a2e9e880fc3afb6fece163e5b896d033d90de3b65042398153594ffd3cea The OpenSSF Package Analysis project identified 'magic-porta1' @ 89.3.5 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10590 Malicious code in a11-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 830a0f8d860411ad1f0a8802b96a54b0a02d75846fb60427a005ffd77c1ef84a The OpenSSF Package Analysis project identified 'a11-cloud' @ 89.3.5 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10656 Malicious code in eslint-plugin-add-display-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8efa7275ffd4613db923c31dba516fc3434fb3fecb4ccfbd1e1cb929399a6b02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10584 Malicious code in yarn2nix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 926aa0eee20951e4172e721ccd2f312b8bf8b7f4618dd28b4f54cde9acdc76d8 The OpenSSF Package Analysis project identified 'yarn2nix' @ 1.3.4 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10577 Malicious code in @devlovedz/react-native-camera-kit-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 724956d5e6ddbc30c35608c68d7472fa0048ac56d9b14ce49222f18a4287d39f The OpenSSF Package Analysis project identified '@devlovedz/react-native-camera-kit-example' @ 0.1.0 npm as malicious. It is considered maliciou...