Malicious code in selfstrpyw (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 23186f64b90d4794a98edff00ca9b05c9413f9906b7bf2d32eaa80f494646489 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selflibreplace (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0c7a81c25a69d8828a51e48b263700dd72829e8cfe1b3ee1190b33f4d5694f57 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selflgtbcc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 12f6dafb068c30b8e9e1f078b5c8f5adaf76ba01f0a28f4fb60850a37dd91672 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqmaskstr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1c9e8afe2af02fc6fd95b287e0aa912de41e993e5fb3215f96cf91780662acf2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in grandstr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 57faa8d4221a3a3354c8eb62bef584ed84b8321431a7ef8eaba67fdd1fec7ada EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in vercc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c2b28db2ef7dfc9e9c8b95e68881622ff3cc7aa9be477258bc42e68afde97f42 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in stringcc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c6920f5b0fadfd0e04cd4caad7ec704ae952be15ef6141f4956938c88ddfdf1f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in nvidiaproof (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8fd24d1ef40f149ec6c69e79e3538092b2bd3077302007403a90dd9f622841f5 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in intlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 41f6b20106ec13c3f7789e6bfda7880f3908e57060095d497e4797166ed6d2cf EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in edcv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 59c94f00ee4bc2aac3ee4932a90f8464b1b90cc60760b211a522582592199089 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in postmask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 42065971b81c0c6e43bc3d2a7c8b0c7a38a4663f01248a7838062773ef079927 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Exploiting ChatGPT’s Popularity for Malware Distribution

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The attack on ChatGPT involved the exploitation of its widespread usage to distribute malware and carry out various cyber-attacks, including phishing and typosquatting...

Malicious code in urlcraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 97b5a119a09ef624c0d520c0f3eb50281d6c24f7fc973fbafed667175efabc67 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in getpost (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c0105e4faacdd7dff8920d32d323cc4081ca3a18cf9797ec7d363a6c6bff0f47 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Threat Actors Adopt Havoc Framework for Post-Exploitation in Targeted Attacks

An open source command-and-control C2 framework known as Havoc is being adopted by threat actors as an alternative to other well-known legitimate toolkits like Cobalt Strike, Sliver, and Brute Ratel. Cybersecurity firm Zscaler said it observed a new campaign in the beginning of January 2023...

K1952: Trojan Horse OpenSSH Distribution - CA-2002-24

Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F...

K17330: GnuTLS vulnerability CVE-2015-3308

Security Advisory Description Double free vulnerability in lib/x509/x509ext.c in GnuTLS before 3.3.14 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted CRL distribution point. CVE-2015-3308 Impact A remote attacker may be able to cause a...

Moderate: python-setuptools security update

The python-setuptools package provides a collection of enhancements to Python distribution utilities allowing convenient building and distribution of Python packages. Security Fixes: pypa-setuptools: Regular Expression Denial of Service ReDoS in packageindex.py CVE-2022-40897 For more details abo...

_distributeProfit will use the stale globalIC.swingTraderCollateralDeficit()/swingTraderCollateralRatio(), which will result in incorrect profit distribution

Lines of code Vulnerability details Impact The distributeProfit called by handleProfit will use globalIC.swingTraderCollateralDeficit/swingTraderCollateralRatio when distributing profits, and the latest globalIC.swingTraderCollateralDeficit/swingTraderCollateralRatio needs to be used to ensure th...

CVE-2022-26032

Uncontrolled search path element in the IntelR Distribution for Python programming language before version 2022.1 for IntelR oneAPI Toolkits may allow an authenticated user to potentially enable escalation of privilege via local access...