Malicious code in sourcify-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b9df2af027b2402dd66d002eec5cfbf3b37918861883becfce5f43127483c9be The OpenSSF Package Analysis project identified 'sourcify-ui' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in onetake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 52bec93f09b5dc6085214609ef35d8aaf2346d6e50e6a12e5304e16aa3493ae2 The OpenSSF Package Analysis project identified 'onetake' @ 1.1.30 npm as malicious. It is considered malicious because: - The package...

MAL-2024-52 Malicious code in onetake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 52bec93f09b5dc6085214609ef35d8aaf2346d6e50e6a12e5304e16aa3493ae2 The OpenSSF Package Analysis project identified 'onetake' @ 1.1.30 npm as malicious. It is considered malicious because: - The package...

Exploit for Path Traversal in Thinkphp

redtail While analyzing my daily access.log report, I noticed...

Malicious code in demo-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7ee37cdc93b14e892899627c645c7fd80fcc18ea968522ffa87ed65ddcb5061b The OpenSSF Package Analysis project identified 'demo-store' @ 4.99.99 npm as malicious. It is considered malicious because: - The package...

MAL-2024-50 Malicious code in optimistic-cart-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0518690394723fc9bf03f60d8192f09e4133e8398d94ec7b04d2fa9ac26796be The OpenSSF Package Analysis project identified 'optimistic-cart-ui' @ 0.99.99 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-49 Malicious code in vg-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d995efbd124e2109bc610be152ba4a331cb7d256d3a70d5df78498e416cffbc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Mastercard Cybersecurity

Safeguarding Trade: Discovering the World of Mastercard Digital Guardrails In our tech-driven era, it is vitro important that financial dealings are shielded competently. A colossal number of exchanges are happening each day, proving the ever growing necessity of sturdy digital protective measure...

Malicious code in essentialist-gallery-block-cgb-guten-block (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a62a19808d12d60a5872aad70b9aced63cd5ec9661be965069f337e0107f8004 The OpenSSF Package Analysis project identified 'essentialist-gallery-block-cgb-guten-block' @ 1.0.0 npm as malicious. It is considered maliciou...

MAL-2024-48 Malicious code in essentialist-gallery-block-cgb-guten-block (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a62a19808d12d60a5872aad70b9aced63cd5ec9661be965069f337e0107f8004 The OpenSSF Package Analysis project identified 'essentialist-gallery-block-cgb-guten-block' @ 1.0.0 npm as malicious. It is considered maliciou...

MAL-2024-64 Malicious code in j5-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eac2e249ebbccb3255a8760bd35b3e6fd100192fe0801b54e53231a71a0789a1 The OpenSSF Package Analysis project identified 'j5-test' @ 1.0.1 npm as malicious. It is considered malicious because: - The package executes o...

GTKWave FST fstReaderIterBlocks2 vesc allocation integer overflow vulnerability

Talos Vulnerability Report TALOS-2023-1790 GTKWave FST fstReaderIterBlocks2 vesc allocation integer overflow vulnerability January 8, 2024 CVE Number CVE-2023-35992 SUMMARY An integer overflow vulnerability exists in the FST fstReaderIterBlocks2 vesc allocation functionality of GTKWave 3.3.115,...

MAL-2024-61 Malicious code in akshansh-jaiswal-ctf-security (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1a21cd8cd0f3e40599808c19641304a3f52f263a31d9b68e9847bc4c6933cc80 The OpenSSF Package Analysis project identified 'akshansh-jaiswal-ctf-security' @ 99.9999.9999 npm as malicious. It is considered malicious...

Malicious code in akshansh-jaiswal-ctf-security (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1a21cd8cd0f3e40599808c19641304a3f52f263a31d9b68e9847bc4c6933cc80 The OpenSSF Package Analysis project identified 'akshansh-jaiswal-ctf-security' @ 99.9999.9999 npm as malicious. It is considered malicious...

Malicious code in noblox.js-servers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis be4b415c87e9f3008a2d199fcc914e49a3a8a047e4bdfcaa493a9364d54accf7 The OpenSSF Package Analysis project identified 'noblox.js-servers' @ 4.15.8 npm as malicious. It is considered malicious because: - The package...

Malicious code in error-can-not-resolve-resource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f44848c297338de1e97a9c4d961ba8f2441f2464713bd36229bf5c0fb7509455 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bakery-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a8e5bc15b6be0a7b0cb44ca4ad86f63a0b563af9160ffe245052f833f3e02ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cloudflare-docs-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bbb41f9171f3ad4b1423390d2a5288a5da4ee679c8757975bc22b33c93e63ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-36 Malicious code in @monokera/react-components-storybook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdf75e7663fbdb265190a8a2b33f0e6feb6e3d3cea6da8c936226cbe4c95f95c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Signal, AI Generated Art Least, Amazon, Facebook Most Invasive Apps, Study

By Waqas In-depth analysis reveals concerning patterns in user data collection, with shopping and food delivery apps at the forefront. This is a post from HackRead.com Read the original post: Signal, AI Generated Art Least, Amazon, Facebook Most Invasive Apps, Study...