Malicious code in kraken-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a66dbe19baabd7b0a714b71a5e3fa9751931aa4041cbe2cac848eb08ef5aeac Any computer that has this package install...

MAL-2025-1294 Malicious code in kraken-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61932b79fa7ada492a4bb1d3351e0d7f98b5b44d86ec407d8fc6fff3067cec00 Any computer that has this package install...

MAL-2025-1286 Malicious code in tokocrypto-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33ba3b3f29ac7a1725f71e0b16ff23e83c034f61280c327bf92fc31ed4ee2d3a Any computer that has this package install...

MAL-2025-1288 Malicious code in tokocrypto-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 669fb8f29120a04d7fb997d7f18b5243d5b90b46b614e108e35658c93a0a5e83 Any computer that has this package install...

MAL-2025-1289 Malicious code in tokocrypto-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bd84bf796800491cc17e73f69c0e77906f1f66f8c79b2de79967944c97df886 Any computer that has this package install...

MAL-2025-1282 Malicious code in xt-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 888d6cec6842a849e2ec069a734943936ab4dcd497fb6dd9e81760860817728e Any computer that has this package install...

MAL-2025-1283 Malicious code in xt-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fed00145b4a626337b346006d12cb2cae629e16ec57d24bb94c191ccd5823c9 Any computer that has this package install...

MAL-2025-1284 Malicious code in xt-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4620b4c964cef23c75cd0562eabb2ff4b07f79eaf1dc268af62da2dcf99ee307 Any computer that has this package install...

MAL-2025-1281 Malicious code in bithumb-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec8160062eddc686429c4bc7c90f6b2e5a3e7ad00942481d64cb749ece398338 Any computer that has this package install...

Malicious code in bithumb-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec8160062eddc686429c4bc7c90f6b2e5a3e7ad00942481d64cb749ece398338 Any computer that has this package install...

MAL-2025-1278 Malicious code in probit-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fda95aa29510bdadd84f77f4192894a8b7ba7729b1fa65823a21672fc9e7674 Any computer that has this package install...

MAL-2025-1279 Malicious code in probit-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b90c84ef211f2f9ce83ee001f131dc0beaf0a6c6bf8667374fb9f14e54ae6fe3 Any computer that has this package install...

MAL-2025-1280 Malicious code in probit-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8db186f44c4cce05bf17f2684794f1def34c2db3c28e7b4eb69347459ddb4c76 Any computer that has this package install...

MAL-2025-1277 Malicious code in probit-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b53f56d9feb1821fb971f6e193dc7ea5df777a9e0136fa3068e4775f197e0e23 Any computer that has this package install...

MAL-2025-1274 Malicious code in toobit-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbef733acdf5215bfdef9bb31af40ec7e1bd2fb0cab3167cf10876e9020e971e Any computer that has this package install...

MAL-2025-1272 Malicious code in toobit-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d0f3cbca32c205dc8a61718610eba04f690441add92e4fb0e98f1e3f18f21f9 Any computer that has this package install...

Malicious code in toobit-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c55608bc5157f14f615aea6e2e8fd8a5004e3a307d5a12e69f5f6d311d2a74c9 Any computer that has this package install...

MAL-2025-1275 Malicious code in toobit-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c55608bc5157f14f615aea6e2e8fd8a5004e3a307d5a12e69f5f6d311d2a74c9 Any computer that has this package install...

Azure Linux 3.0 Security Update: rsync (CVE-2024-12084)

The version of rsync installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-12084 advisory. - A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of...

CVE-2024-47880

OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the export-rows command can be used in such a way that it reflects part of the request verbatim, with a Content-Type header also taken from the request. An attacker could lead a user to a malicious page th...