Malicious code in metamask-sdk-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 563827ad840866efcd9358d913c0a4e28044e336ac6d4ebc9a33c631afd70ed4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11466 Malicious code in tatatata (npm)

--- -= Per source details. Do not edit below this line.=-...

GO-2022-0302 SQL injection in github.com/navidrome/navidrome

SQL injection in github.com/navidrome/navidrome...

GO-2022-0972 Panic in github.com/shamaton/msgpack/v2

Unmarshal can panic on some inputs, possibly allowing for denial of service attacks...

Malicious NPM Package Caught Mimicking Material Tailwind CSS Package

A malicious NPM package has been found masquerading as the legitimate software library for Material Tailwind, once again indicating attempts on the part of threat actors to distribute malicious code in open source software repositories. Material Tailwind is a CSS-based framework advertised by its...

rtxteam/rtx SQL injection vulnerability

rtxteam/rtx is a software repository. A SQL injection vulnerability exists in the GitHub repository rtxteam/rtx in versions prior to checkpoint2022-04-20, which stems from an SQL injection in the ARAX-UI synonym lookup function. An attacker could exploit this vulnerability to cause remote code...

Malicious NPM Packages Caught Running Cryptominer On Windows, Linux, macOS Devices

Three JavaScript libraries uploaded to the official NPM package repository have been unmasked as crypto-mining malware, once again demonstrating how open-source software package repositories are becoming a lucrative target for executing an array of attacks on Windows, macOS, and Linux systems. Th...

RubyGems Packages Laced with Bitcoin-Stealing Malware

RubyGems, an open-source package repository and manager for the Ruby web programming language, has taken two of its software packages offline after they were found to be laced with malware. RubyGems provides a standard format for distributing Ruby programs and libraries in the service of building...

Parrot Security 3.9 - Security GNU/Linux Distribution Designed with Cloud Pentesting and IoT Security in Mind

Security GNU/Linux distribution designed with cloud pentesting and IoT security in mind. It includes a full portable laboratory for security and digital forensics experts, but it also includes all you need to develop your own softwares or protect your privacy with anonymity and crypto tools...

[SECURITY] Fedora 24 Update: pulp-2.8.2-1.fc24

Pulp provides replication, access, and accounting for software repositories...

NYTimes Report: Attackers Hit Google's Password System

The New York Times is reporting that Google’s password system was compromised during a targeted attack last December. The system, called Gaia or Single Sign-On, controls access by millions of users worldwide to almost all of the company’s Web services, including e-mail and business applications...