MAL-2023-1821 Malicious code in ebsockets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d5bfc56384d3b5657d73c00e22132af51c3b47a8b767bde65d5b31401b60df92 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in websocets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 466292a81e99e2d203935987ab3f37b0175a12275894c97387eb075b71884c07 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in websokets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e8b6f01e8e4ba4dd4d17c1e52ce6ad43d998bbf82b8d5ffa2375d4756437803d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2403 Malicious code in websocktes (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 00fdc512df34b3b247455202140e3d1b3bce86183cc0216ce81a475590c5420e Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2456 Malicious code in yfinanec (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d81489f6e919c12171b1655da889187a032f7ef27746fdfc6dda5c9b811e994b Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in yvper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 53b17fd4f9f0d8f72d214b72683b4e65516bd40b5f724d1e615f4c325629c0cb Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in vyperr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8b4ecdc668e4784bdbc4b3edf38d60697ef4752cf7d06af9c8ae027a3916e45c Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1657 Malicious code in bitcoilnib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4dd8dd1e362e84abd69705afac8fe36e56efb925bb12b545a441c0ebff4f6b10 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1748 Malicious code in crytpocompare (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d089412c803671b069fd82ff5387cf5449d11dc17f3aa7a7295527a06326d0db Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1706 Malicious code in crypotcompare (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c52ad7cd9331da60215c98cfafcd7542ddbd66fc466dc226c3694451292a9aad Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in crytofeed (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 31aaae8a59e4d6db081811c81d6ccf8d25e068d332dda2d1ed408b8cec0b08a6 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in crypotfeed (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b4588a6de65bb1177842e5c647887bb81a2e8b22bf29d968a2f7a054d8ec0f70 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1830 Malicious code in ferqtrade (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 18cc0f08f6bc2db28674fad653770d86cfd55c151a1380feb8acdd0c17e5e90e Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1678 Malicious code in ccxtt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6e773dfbf272510462161ef414375e503b05178db70661f62abc709494f507c0 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in ccxxt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2f0475928d01aa7735ccbbd11aea089aa02c703d8449177cd3e5d32636246059 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

CVE-2023-25151

opentelemetry-go-contrib is a collection of extensions for OpenTelemetry-Go. The v0.38.0 release of go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp uses the httpconv.ServerRequest function to annotate metric measurements for the http.server.requestcontentlength,...

MAL-2023-671 Malicious code in pdb-extensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f01d39a5912b29ddba1313f299abcf80c8aca983b9d61a8f6580726c7e1a6e77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in pdb-extensions

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in pdb-extensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f01d39a5912b29ddba1313f299abcf80c8aca983b9d61a8f6580726c7e1a6e77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

org.jenkins-ci.plugins.workflow:workflow-cps (>=2.40, <=2.41), org.jenkins-ci.plugins:claim (>=2.10, <=2.15) +3 more potentially affected by CVE-2023-24422 via org.jenkins-ci.plugins:script-security (1.34)

org.jenkins-ci.plugins:script-security MAVEN version 1.34 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-cps =2.40, =2.10, =1.7, =1.2.5, =1.2.5,...