Malicious code in sys-selenium (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a1ae15b4cab934fe2bdb8472ceb8f00edfd582688a810321e7e4814ca66cbe98 The OpenSSF Package Analysis project identified 'sys-selenium' @ 9.1.9 pypi as malicious. It is considered malicious because: - The package...

Malicious code in beautifulsoup-requests (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cc11085b5c187111cb280cd12d78f3ba5b635e03348df14b3d2a116a57d2c7a1 The OpenSSF Package Analysis project identified 'beautifulsoup-requests' @ 12.15.13 pypi as malicious. It is considered malicious because: - The...

MAL-2023-1370 Malicious code in install-crypto (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6226d5b0f89ec8275730cc47b85f33998f62c7a555a51ae59917a445ffb9e1d1 The OpenSSF Package Analysis project identified 'install-crypto' @ 4.18.5 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1373 Malicious code in keras-arg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 32a0f3bb37cc11bc53e1eae707f72ba2dea5ea32aa1c3a1a631de2254b9a00de The OpenSSF Package Analysis project identified 'keras-arg' @ 19.14.9 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1395 Malicious code in pylint-sys (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b069b475056c2219d8f5f62b9e0479ba4dfb9a18639f9afd674c9ef90359882d The OpenSSF Package Analysis project identified 'pylint-sys' @ 8.15.6 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1371 Malicious code in install-pytest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c354c0f5dc76b96d0db0745a885c308a97e8edfa82d219fda8c353dd567b43d6 The OpenSSF Package Analysis project identified 'install-pytest' @ 1.12.7 pypi as malicious. It is considered malicious because: - The package...

Malicious code in mets-disclosures (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c300cd1bdefb340a29adcef2aaf349875956aec72a7156652cf9dfed6bf26c79 The OpenSSF Package Analysis project identified 'mets-disclosures' @ 0.0.227 npm as malicious. It is considered malicious because: - The package...

Security Bulletin: Vulnerability from Google Gson affect IBM Operations Analytics - Log Analysis (CVE-2022-25647)

Summary Google Gson shipped with Log Analysis is vulnerable to denial of service Vulnerability Details CVEID:CVE-2022-25647 DESCRIPTION: Google Gson is vulnerable to a denial of service, caused by the deserialization of untrusted data. By using the writeReplace method, a remote attacker could...

Searching for AI Tools? Watch Out for Rogue Sites Distributing RedLine Malware

Malicious Google Search ads for generative AI services like OpenAI ChatGPT and Midjourney are being used to direct users to sketchy websites as part of a BATLOADER campaign designed to deliver RedLine Stealer malware. "Both AI services are extremely popular but lack first-party standalone apps...

Rust-Based Info Stealers Abuse GitHub Codespaces

This is the first part of our security analysis of an information stealer targeting GitHub Codespaces CS that discusses how attackers can abuse these cloud services for a variety of malicious activities...

Kiddoware Kids Place Parental Control Android App 3.8.49 XSS / CSRF / File Upload Vulnerabilities

======================================================================= title: Multiple Vulnerabilities product: Kiddoware Kids Place Parental Control Android App vulnerable version: =3.8.49 fixed version: 3.8.50 or higher CVE number: CVE-2023-28153, CVE-2023-29078, CVE-2023-29079 impact: High...

MAL-2023-1366 Malicious code in guiconsoles (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 24a3798623a3f68e4c418540b53aa81d86785aeb5618a02914aa14be4c4311ba The OpenSSF Package Analysis project identified 'guiconsoles' @ 1.0.5 pypi as malicious. It is considered malicious because: - The package...

Malicious code in docs-component-follow-public-pop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ee5ed5d036b992d7f499e1931abb9513f56db1572a9ea4d5fc7cc45e2140f5ad The OpenSSF Package Analysis project identified 'docs-component-follow-public-pop' @ 1.0.8 npm as malicious. It is considered malicious because:...

MAL-2023-1160 Malicious code in docs-component-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1e4e933240e0533957a39c9132a6925469e069081320949dc198545fd1080a49 The OpenSSF Package Analysis project identified 'docs-component-title' @ 1.2.2 npm as malicious. It is considered malicious because: - The packa...

Malicious code in docs-component-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1e4e933240e0533957a39c9132a6925469e069081320949dc198545fd1080a49 The OpenSSF Package Analysis project identified 'docs-component-title' @ 1.2.2 npm as malicious. It is considered malicious because: - The packa...

MAL-2023-1156 Malicious code in docs-component-advanced-permission (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1a065d7fc179e436125a277398d58863cc0c5145b5220c893c09409bdd44807d The OpenSSF Package Analysis project identified 'docs-component-advanced-permission' @ 1.1.0 npm as malicious. It is considered malicious becaus...

MAL-2023-1159 Malicious code in docs-component-like (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cde662c7be657edd2cffb28c74114bf428fa1b9db283784ae67f159dbf201ce2 The OpenSSF Package Analysis project identified 'docs-component-like' @ 1.0.6 npm as malicious. It is considered malicious because: - The packag...

MAL-2023-1157 Malicious code in docs-component-folder-selector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 029903e7351485fc54de0e50d6f2f3c9c822895bd8d97930476b5a69f23dd6f9 The OpenSSF Package Analysis project identified 'docs-component-folder-selector' @ 1.0.6 npm as malicious. It is considered malicious because: -...

Exploit for Improper Input Validation in Microsoft

CVE-2023-21554-PoC CVE-2023-21554 is a Windows MessageQueuin...

MAL-2023-1209 Malicious code in index-template-mets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 104f2ff9714322069aa6e619d7050de41349e85f4c3eaa04c4c25ba0e239e8a9 The OpenSSF Package Analysis project identified 'index-template-mets' @ 1.0.1 npm as malicious. It is considered malicious because: - The packag...