Malicious code in libencodeultrainfo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 784672c439827c688d501aef7c51cd613a8c829999a1107d168f32edb7962ad2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6143 Malicious code in selfhackedcpuvirtual (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a8209408beebe2dc044b11633e8b264eaf0196dde9c30f741ce9c6e381d581a9 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7478 Malicious code in tppywcandyping (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a1f34b34cf7828f75342776dfcf13e9505e51bcde15f061d1a0e42c05199a984 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7102 Malicious code in tphackedpullpaypal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9ff8422d1bbb04831664aff59cec75cfec9c86ad637f11cb4b11a7fbbfff1743 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2970 Malicious code in esqhydraramhydra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 92f7702dcafaccd82de61b5eaf50f91db4ef70b2fbf20141a9da2ddabcdb3cb5 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4502 Malicious code in libsplitvirtualload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b2378ba2f6a0fa52b74e73476d88df59d29033726f05838a273c925ee16a4ce8 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5514 Malicious code in py-pushguire (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ffabd32675d8651e667bc1dc1b5063dce4306904ef348022685f2555f1fa4f69 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2869 Malicious code in esqgamegrandmc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 20a814115976921535940566feabff918f934dba1dd721c8d4729f7b0da4c0c5 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3996 Malicious code in libgameremask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d6d3e79ee364900e59e74d0af563ff4cc8318d8d96434da943f1760acee88d92 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6796 Malicious code in selfvmminehttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 284c8447c796dcc3736118932e30af5057f0ec1b5715b98339d3f591fa32002f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5552 Malicious code in py-raminteled (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 94a5c9d8fdfe8ba3edf18b06bc13669b6ef9eb87f1421da13b0d3dd388c407b9 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3006 Malicious code in esqinthackednvidia (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5fc346264c79f91aaf074dd1bdf81f5af9caf0ca78357cd7a04651276b491457 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6496 Malicious code in selfprooframad (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4a3c9cfa5e2b11966763bc01121c5433e6ca9634585e3f5ce6b147a15597b533 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4491 Malicious code in libreurlping (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a992ff480c266905105462eda72b1fcaf7429ba320250e0a3665cce59d3d46b2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3289 Malicious code in esqpycraftpost (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6a603cf288520ea30f3f82613af7c2ab5ac6a264df85fe0a5b92b61a0e409c96 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6194 Malicious code in selfinfocvgame (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4025c4e397b4b9bea1405986b6d3dba1d05e800d8f3b087a1f330d52441d464b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3444 Malicious code in esqstrsplitmask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 05b600bd6debed3817b65a67771f83bcba11cad9982ad130b1737c3f9ad0e91a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

WordPress Simple Slug Translate Plugin <= 2.7.2 is vulnerable to Cross Site Scripting (XSS)

Software Simple Slug Translate Type Plugin Vulnerable versions = 2.7.2 Fixed in 2.7.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-26515 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a353ffb7160f Credits yuyudhn Required...

WordPress Dashboard Widgets Suite Plugin <= 3.2.1 is vulnerable to Cross Site Scripting (XSS)

Software Dashboard Widgets Suite Type Plugin Vulnerable versions = 3.2.1 Fixed in 3.2.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-26517 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID b0d81df240e3 Credits Rio Darmawan...

WordPress Coupon Zen Plugin <= 1.0.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software Coupon Zen Type Plugin Vulnerable versions = 1.0.5 Fixed in 1.0.6 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE N/A Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 6059f6769c37 Credits WordFence Required privilege...