MAL-2024-10880 Malicious code in maven-dependency-submission-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1381f1caf30bbc11135c6f4ffc6634a4cdeaaa63627d583675758c564c38c804 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-11618

A vulnerability classified as critical was found in IPC Unigy Management System 04.03.00.08.0027. Affected by this vulnerability is an unknown functionality of the component HTTP Request Handler. The manipulation leads to server-side request forgery. The attack can be launched remotely. The explo...

CVE-2024-51073

An issue in KIA Seltos vehicle instrument cluster with software and hardware v1.0 allows attackers to control or disrupt CAN communication between the instrument cluster and CAN bus. NOTE: this is disputed by the Supplier because the findings came from a potentially unrealistic test environment a...

MAL-2024-10877 Malicious code in newpipv3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 54fac2a807bae6742d82c86f55d97a1b4a810e42ee3b0b9dcb0c981c36ab712d The OpenSSF Package Analysis project identified 'newpipv3' @ 0.1.0 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-10888 Malicious code in webpack-insert-sentry-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e09bc9d55945389c2e5f8e61bc733735e8f50b50b8ebd61b6801f9d31278d74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web_enhance_sap-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1929ef8619831ff03c7cb7059585b7c1004f18089f8a438ea4b45648363dc924 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-51073

An issue in KIA Seltos vehicle instrument cluster with software and hardware v1.0 allows attackers to control or disrupt CAN communication between the instrument cluster and CAN bus. NOTE: this is disputed by the Supplier because the findings came from a potentially unrealistic test environment a...

MAL-2024-10876 Malicious code in viz_schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49e689b8cfd5c43cd35b51823085d1f772fa517d58837f56093c7d699294fde3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in viz_schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49e689b8cfd5c43cd35b51823085d1f772fa517d58837f56093c7d699294fde3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uuid-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30f88a43630b6ef5d7da8f6ba0cda55412b61b9b682d32bae81951e545ce6915 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10873 Malicious code in uuid-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30f88a43630b6ef5d7da8f6ba0cda55412b61b9b682d32bae81951e545ce6915 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Bidirectional communication via polyrhythms and shuffles: Without Jon the beat must go on

Welcome to this week's edition of the Threat Source newsletter. Bidirectional communication is foundational to a well-built team regardless of environment. It's critical in information security to be able to drive a conversation up the ladder and down and not lose the critical elements. One of th...

Malicious code in uss-vod-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f069de485e57ad5262d4b158a8a64d396cae1798fd4fa85cf2802ac7fec711e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10849 Malicious code in my-wallet-backupt-decryption-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27ce6fe7581d2cdb10673965b6fefaeef4f33c8ae7f8ab0f45e5e3341065620e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in storage-atom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f8d850e9e2955072a6fa29c079bda39350473f9ba56b3efec63bcc7e283c563 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10868 Malicious code in ssc-upload-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f805f8fdf8bbc931902fd9635ef6061d0bfc25743ba0a24a20ee876b6e2c8ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ssc-org-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d921c8745841727abc5f7952027260365f833469b4d9c19256a95cbfd89737d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10863 Malicious code in spid-gc-ui-leaderboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d8763b265bbae0905c18ebc08f6172c04bcfde90c538984eb52d0a5902507ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shopee-form-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 993bcd6e55a784b07d25bde8752b92602b018036f8ba3de7fd78e85addad1634 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-fatigue-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fcb64ab16a7b12d7342e39dae03aeb4556ed831e407c63d3ea67ede1b88aa2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...