Malicious code in start-decent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74681df6bc6b8b3247624569b8632e201a6fac47376cc8561d59fccc697d83ab The OpenSSF Package Analysis project identified 'start-decent' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11882 Malicious code in microsoft.applicationinsights.persistencechannel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c6d541610ea02e1c898560a24798cf5ccb4c38d66f367bc6f205cc4fe5377dc The OpenSSF Package Analysis project identified 'microsoft.applicationinsights.persistencechannel' @ 99.99.99 npm as malicious. It is considered...

2024 Threat Landscape Statistics: Ransomware Activity, Vulnerability Exploits, and Attack Trends

Now that we’ve reached the end of another year, you may be looking around the cybersecurity infosphere and seeing a glut of posts offering “hot takes” on the 2024 threat landscape and predictions about what’s coming next. At Rapid7, we don’t truck in hot takes, but rather, cold hard facts. Stayin...

2024 Threat Landscape Statistics: Ransomware Activity, Vulnerability Exploits, and Attack Trends

Now that we’ve reached the end of another year, you may be looking around the cybersecurity infosphere and seeing a glut of posts offering “hot takes” on the 2024 threat landscape and predictions about what’s coming next. At Rapid7, we don’t truck in hot takes, but rather, cold hard facts. Stayin...

Malicious code in asymmetric-key-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d6f4c9090980b70af6effbd1be18a9ca571dd90a4f1cca30d44f84083dcec613 The OpenSSF Package Analysis project identified 'asymmetric-key-generator' @ 9.9.9 npm as malicious. It is considered malicious because: - The...

MAL-2024-11876 Malicious code in web3-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 965af70ebf07de371170bda6a257b464ee058430c0f1d6112323bacabbe19d5c The OpenSSF Package Analysis project identified 'web3-docs' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in 32red-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e16d461f49ce237448a5ebe2cecd68f816f19e3209965bc445d5e57a89ff938b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11847 Malicious code in support-conversations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edda50ab2f0ce5968a008967fbb252094f125171a8759dc97957ee5f7d8d8826 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rwoka (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 601385385b682f6bdaa31c763e64c5fafb16f22df60acd266c9c7f23f73208ee The package contains highly obfuscated content, that install another, downloaded from a remote location obfuscated script in the installation path of the...

Malicious code in rsd-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1ce32a78d33195ba4d402cad16a668c6dd0a2273f8e6a49b0ba2c65be6c88fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

390,000+ WordPress Credentials Stolen via Malicious GitHub Repository Hosting PoC Exploits

A now-removed GitHub repository that advertised a WordPress tool to publish posts to the online content management system CMS is estimated to have enabled the exfiltration of over 390,000 credentials. The malicious activity is part of a broader attack campaign undertaken by a threat actor, dubbed...

MAL-2024-11825 Malicious code in rarible-program-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ebfe242bd7c35911f61115ae2c00d485a5bb93b81ddf36f6f40af24fb1cd977 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11823 Malicious code in simulation_service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf6c7d5222c0cf39b74d1359864f3ae93cef37354056d3bed6b1d95df61d66a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pipedream-curl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c8b5e047b6a8fdba2b0c3473a51edbdb9b488f22377ca3a66bb206193e7da7e5 The OpenSSF Package Analysis project identified 'pipedream-curl' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in test-rce3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 268f9a9b82d8e6d94dede1f419570ec5e28e30480f9ee76c010cacc4e248fd81 The OpenSSF Package Analysis project identified 'test-rce3' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in testing-example-amnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e3e68fcb0722dd3025334d128515302686aff3ebed84afc0747731353153fff The OpenSSF Package Analysis project identified 'testing-example-amnu' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...

Malicious code in bug-bounttest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c7018070d75a9db3006ec183ff527cb9b6ee7d018d852bf06d3892a04874aa03 The OpenSSF Package Analysis project identified 'bug-bounttest' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11791 Malicious code in raptor-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 585ea8fb4bbab2014a88a88807c9c5150eaf104c34a0d3158c0b7ed114aba2c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()

...

MAL-2024-11786 Malicious code in paypal-js-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6775b74cea176b7aaff3429e4e55a224d9f03da9865a07c99940ff7f0cf1162 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...