MAL-2024-11784 Malicious code in shyftportal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c420e2c055c4dac21abe5aa3deacde16aef6dcd57335d4244adffc4346365a2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-53677

creationtimestamp| type| source ---|---|--- 2024-12-11 15:43:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113634953112650669 2024-12-11 17:44:47+00:00| seen| https://t.me/cvedetector/12636 2024-12-11 21:07:18+00:00| seen|...

MAL-2024-11780 Malicious code in @aoflmkt/app-call (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7ceabbeb0d20f6267c8883498e7c31aa52148eff458969a12d2397d930978d85 The OpenSSF Package Analysis project identified '@aoflmkt/app-call' @ 100.100.106 npm as malicious. It is considered malicious because: - The...

Rockwell Automation Arena (Update C)

RISK EVALUATION Successful exploitation of these vulnerabilities could result in execution of arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize network exposure for all control...

Horner Automation Cscape

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to disclose information and execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize...

MAL-2024-11251 Malicious code in @neo-ds/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eb7303825f9830a20957d406c7a1b9193816b17c907592e4fa1e8a6fa48c61e3 The OpenSSF Package Analysis project identified '@neo-ds/components' @ 3.3.7 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11245 Malicious code in tripadvisor-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c430074a1fd3319e4d1988f453c9a5cc9f7df15fc95b8a95de824c3a9badbbef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bbbx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f65327748810d1f9ddedf9a740022a1a282e2ed41e6d5f62db78c7b1216d83b1 The OpenSSF Package Analysis project identified 'bbbx' @ 1.0.4 npm as malicious. It is considered malicious because: - The package communicates...

MAL-2024-11241 Malicious code in bbbx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f65327748810d1f9ddedf9a740022a1a282e2ed41e6d5f62db78c7b1216d83b1 The OpenSSF Package Analysis project identified 'bbbx' @ 1.0.4 npm as malicious. It is considered malicious because: - The package communicates...

MAL-2024-11232 Malicious code in zkonmina (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a74c40ef671e2fb9d5956f1fd7f022e0dd1ca0f1da3602a687e9172cc4280fcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-44855

creationtimestamp| type| source ---|---|--- 2024-12-06 21:55:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113608108082559325 2024-12-06 23:59:42+00:00| seen| https://t.me/cvedetector/12284...

Malicious code in prettier-v3-for-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 522c1e741b8482af7e3577e20c83b8e29a0f217b9c951d0e815e5c01af165408 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11222 Malicious code in prettier-v3-for-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 522c1e741b8482af7e3577e20c83b8e29a0f217b9c951d0e815e5c01af165408 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-12254

creationtimestamp| type| source ---|---|--- 2024-12-06 18:08:03+00:00| seen| https://t.me/cvedetector/12242 2025-01-29 20:06:38+00:00| seen| https://bsky.app/profile/mitsuhiko.at/post/3lgvrgdrdsk24 2025-01-29 20:06:38+00:00| seen| https://bsky.app/profile/mitsuhiko.at/post/3lgvrgcpcws24 2025-04-0...

Detecting Pegasus Infections

This tool seems to do a pretty good job. The company's Mobile Threat Hunting feature uses a combination of malware signature-based detection, heuristics, and machine learning to look for anomalies in iOS and Android device activity or telltale signs of spyware infection. For paying iVerify...

Exploits and vulnerabilities in Q3 2024

Q3 2024 saw multiple vulnerabilities discovered in Windows and Linux subsystems that are not standard for cyberattacks. This is because operating system developers have been releasing new security mitigations for whole sets of vulnerabilities in commonly used subsystems. For example, a log...

MAL-2024-11219 Malicious code in asuuuuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 40d2219a3e70e5af240f63d41ab082cad543b84acf2abd045011db292bc69654 The OpenSSF Package Analysis project identified 'asuuuuu' @ 3.1.3 npm as malicious. It is considered malicious because: - The package communicat...

GHSA-R6WX-627V-GH2F Directus has an HTML Injection in Comment

Summary The Comment feature has implemented a filter to prevent users from adding restricted characters, such as HTML tags. However, this filter operates on the client-side, which can be bypassed, making the application vulnerable to HTML Injection. Details The Comment feature implements a...

“aiocpa” Python Package Exposed as Cryptocurrency Infostealer

SUMMARY The machine learning-based threat-hunting system of leading threat intelligence and cybersecurity firm ReversingLabs RL recently detected malicious…...

MAL-2024-11202 Malicious code in buoyant-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a848aad4ed9b021dd1c4df3717c23fc8ef9578378c9bb92abe8f921a77ea100c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...