MAL-2024-7801 Malicious code in slo-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 43e18d91b3514c4d1f87bbc68730da7b0ce3213e132d2133cb2ee0d06bc07504 The OpenSSF Package Analysis project identified 'slo-schema' @ 10.20.2 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7800 Malicious code in dagit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdc606f7fb150c7677aed483cf4e524fec208106f3ec8d573a646547034122fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Positron Broadcast Signal Processor

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : Positron S.R.L Equipment : Broadcast Signal Processor TRA7005 Vulnerability : Authentication Bypass Using an Alternate Path or Channel 2. RISK EVALUATION...

How to collect XenServer Conversion Manager logs

Collect XenServer Conversion Manager logs for analysis...

MAL-2024-7836 Malicious code in health-check-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ef9d93b4469df4d458d4c4a226b45fa7baf7760a84cd3d8b5fc84fb990e0e6ba The OpenSSF Package Analysis project identified 'health-check-nodejs' @ 3.16.1 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-7795 Malicious code in @vertiv-co/ui-library-nextgen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ffbf749ac60481466ea1b80f8cdcf3d84df099b6496876a765054477889570d6 The OpenSSF Package Analysis project identified '@vertiv-co/ui-library-nextgen' @ 10.0.2 npm as malicious. It is considered malicious because: -...

MAL-2024-7796 Malicious code in @vertiv-co/viewer-service-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a42df7da8768f315d6d12eb06fa799e0781561526ae3c71ad21f34b1dfe06411 The OpenSSF Package Analysis project identified '@vertiv-co/viewer-service-library' @ 10.0.15 npm as malicious. It is considered malicious...

MAL-2024-7793 Malicious code in appds-nodejs-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f1ac973f28037939ed23e341eacd9fcc006c3709075045f2d51232131c111977 The OpenSSF Package Analysis project identified 'appds-nodejs-utils' @ 0.2.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7837 Malicious code in tyibyc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 786311540d56cd996efe5220ccf60e906bf9ba3659372a080971ecf9b2e858dc The OpenSSF Package Analysis project identified 'tyibyc' @ 1.5.31 npm as malicious. It is considered malicious because: - The package executes o...

MAL-2024-7783 Malicious code in chromestatus-openapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3f0ae839e77574e6fbdeb08227dfe2e2d3be958d34456a8cc4df440988db1e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

How to Set up an Automated SMS Analysis Service with AI in Tines

The opportunities to use AI in workflow automation are many and varied, but one of the simplest ways to use AI to save time and enhance your organization's security posture is by building an automated SMS analysis service. Workflow automation platform Tines provides a good example of how to do it...

MAL-2024-7782 Malicious code in google-map-markerclusterer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7d6f6cce68b78a64c491ce96d722b6ae80bb91893fd7933538540e99bd4e30a9 The OpenSSF Package Analysis project identified 'google-map-markerclusterer' @ 1.2.8 npm as malicious. It is considered malicious because: - The...

MAL-2024-7781 Malicious code in angular-material-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cc6ec3d00f5ac0565644d0b1fce06bf68473a14b48df88761451345f12c7475c The OpenSSF Package Analysis project identified 'angular-material-panel' @ 1.1.5 npm as malicious. It is considered malicious because: - The...

MAL-2024-7779 Malicious code in shadycss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 63b72ee48be67972ecef0ef8abb174f91a248b159d505d0cfc49975e6261dc01 The OpenSSF Package Analysis project identified 'shadycss' @ 1.0.7 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7840 Malicious code in testjsonn2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0d75d52ae07c9c9e2e6b773f2806c66631dd764da793bac0559e65bc4d0e7f66 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-ronnyfredd-exfiltr-clipboard Reasons based on the...

Malicious code in testjson3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 783bce620b6d82880784734f95e5e48217bdc056277d57781a45fb14b66bcb97 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-ronnyfredd-exfiltr-clipboard Reasons based on the...

Malicious code in testjsonn1 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d8b57f71eadeb645df871ae41a475cb9a8ba647679e7455f66e0c9e9b5627651 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-ronnyfredd-exfiltr-clipboard Reasons based on the...

Malicious code in fe-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f10193d263c551e806779906e66b796c66043d73893719ea555b3c822b27adc4 The OpenSSF Package Analysis project identified 'fe-bootstrap' @ 70.69.69 npm as malicious. It is considered malicious because: - The package...

Exploit for Improper Input Validation in Atlassian Confluence_Data_Center

CVE-2023-22515-NSE This repository provides a tool to check f...

MAL-2024-7771 Malicious code in express-jwt-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fe7d6a9d5298553234316cd7fd21bd7ac74d55c02a1e156505dd54dc8944e648 The OpenSSF Package Analysis project identified 'express-jwt-v6' @ 6.0.6 npm as malicious. It is considered malicious because: - The package...