233 matches found
MAL-2023-2172 Malicious code in requests-tooleblt (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 557e510eebc15089acf31ec61853895e79c3ca93441ded980c4097eea04d9684 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
MAL-2023-2387 Malicious code in websocket-cliennt (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx ce81626c97864e772e307901ca4c296db0ea985a4296d6d5c910615cc6b94efa Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
MAL-2023-2103 Malicious code in pythno-binance (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx dacedec4b2a59a2a4d868abd54d298f67cfcf907235ff7969a13b4356078b674 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
Malicious code in pythonn-binance (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 48695707cb63c55f3d31f02afcc450e381442017b60f90f7eebffb87c0dc0622 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
MAL-2023-2223 Malicious code in scikti-learn (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx dcd1ab0fedf061e95dbb730fa302eedb069cbec1ec2f8a73fa9918223e61e584 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
MAL-2023-2070 Malicious code in pyinsaller (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5a3e007bb125020a61277cf6a75172eb9dbf2b6750ed5a6bddcca6751e7c49d9 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
MAL-2023-1913 Malicious code in mtplotlib (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx ed20a34076caa81b73dd8eaec26a1479a0c410d3bd0020b6134b393b5282baae Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
MAL-2023-1894 Malicious code in maatplotlib (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5fd54b8946d61b481aceba9e137754cab3a42427be859691965ca12ddb9083b6 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
MAL-2023-1621 Malicious code in beautifulsoupp4 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx d69608ebc4615ac7514ffb387661c6ed72480706c0db29c2b889908fc8bf6f7e Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
MAL-2023-1821 Malicious code in ebsockets (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx d5bfc56384d3b5657d73c00e22132af51c3b47a8b767bde65d5b31401b60df92 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
MAL-2023-2456 Malicious code in yfinanec (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx d81489f6e919c12171b1655da889187a032f7ef27746fdfc6dda5c9b811e994b Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
MAL-2023-1748 Malicious code in crytpocompare (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx d089412c803671b069fd82ff5387cf5449d11dc17f3aa7a7295527a06326d0db Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
Malicious code in crytofeed (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 31aaae8a59e4d6db081811c81d6ccf8d25e068d332dda2d1ed408b8cec0b08a6 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
MAL-2023-1678 Malicious code in ccxtt (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6e773dfbf272510462161ef414375e503b05178db70661f62abc709494f507c0 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
Google Chrome Buffer Overflow Vulnerability (CNVD-2023-12026)
Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security vulnerability that originates from a boundary error in the platform application for untrusted inputs, which can be exploited by a remote attacker to convince users to install malicious extension...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser from Google, Inc. in the United States. Google Chrome has a security vulnerability that stems from the use of free in the shopping cart allows an attacker to convince users to install malicious extensions, an attacker can exploit the vulnerability by exploiting heap...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser from Google, Inc. in the United States. Google Chrome has a security vulnerability that stems from the use of free in the shopping cart allows an attacker to convince users to install malicious extensions, an attacker can exploit the vulnerability by exploiting heap...
CVE-2023-0134
Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via database corruption and a crafted HTML page. Chromium security severity: Medium...
Hackers Can Abuse Visual Studio Marketplace to Target Developers with Malicious Extensions
A new attack vector targeting the Visual Studio Code extensions marketplace could be leveraged to upload rogue extensions masquerading as their legitimate counterparts with the goal of mounting supply chain attacks. The technique "could act as an entry point for an attack on many organizations,"...