MAL-2024-11160 Malicious code in @peakon/records (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7cc43d1543325c5d364cf817c9034c238a4bb976c18e7c1b77cde8e2063a5c0b The OpenSSF Package Analysis project identified '@peakon/records' @ 100.100.105 npm as malicious. It is considered malicious because: - The...

MAL-2024-11157 Malicious code in flpweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1990c310aa0a3cd0c27f4306fe0f81385afb6c137acc4f6b1c42ea5ceb3a4845 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11127 Malicious code in o-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74bc5048fb21f496bad53a05dea80054544d296f7a86832b46cfe4b8d5242fea The OpenSSF Package Analysis project identified 'o-table' @ 10.10.28 npm as malicious. It is considered malicious because: - The package...

Malicious code in byted-df (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 821138aac758315c7a31a463523c4930bdd52e67699199e4c8bda0511c5907f8 Importing the module triggers sending out the hostname to the package author. It looks to be a placeholder/pentest activity related to BytedDance. --- Category...

CVE-2024-11667

creationtimestamp| type| source ---|---|--- 2024-11-28 16:03:51+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113561425060709873 2024-11-29 13:29:46+00:00| exploited| https://t.me/CyberBulletin/1650 2024-11-29 22:48:52+00:00| seen|...

APT trends report Q3 2024

Kaspersky's Global Research and Analysis Team GReAT has been releasing quarterly summaries of advanced persistent threat APT activity for over seven years now. Based on our threat intelligence research, these summaries offer a representative overview of what we've published and discussed in more...

CVE-2018-9377

In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pending intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-38834

creationtimestamp| type| source ---|---|--- 2024-11-26 12:01:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113549148357118906 2024-11-26 13:04:11+00:00| seen| https://t.me/CyberBulletin/1625 2024-11-26 13:04:11+00:00| seen| https://t.me/CyberBulletin/26626 2024-11-26 15:02:55+00:00|...

MAL-2024-10901 Malicious code in aries-bifold-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eca3e60fffb3a648dbd8cdd504332376d85921d174fa35cf3d8dae17f1302543 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10900 Malicious code in rc-network (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92fa4153701892bbacd5a9c984d56b98fb7dde59df2dc84760fe47af95bad5fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10898 Malicious code in canvaskit-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8fec757cb441808c4cf235ccb1ef0bcf9325ffebc3a5efcc43bc21669e0feb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-0867

creationtimestamp| type| source ---|---|--- 2024-11-24 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-24 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-05-16 00:00:00+00:00| exploited| The Shadowserver...

Exploit for Deserialization of Untrusted Data in Veeam Veeam_Backup_\&_Replication

CVE-2024-40711-poc CVE-2024-40711 is a serious vulnerability...

Malicious code in graph-studio-billing-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afd4325b249b7dfad124c21ffe39f85d2e38f1b6c2d31361f81e821adb8365ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10885 Malicious code in @framgia/test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a84ece988632f5b1341c70168c0e8ca664277c904e9aae19d1541c7f7e2df3c8 The OpenSSF Package Analysis project identified '@framgia/test' @ 9.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10882 Malicious code in codeql-sarif-security-standard-annotator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware daf28531c7b9ae5e115da81a3041d6e35bed2b6764cfabb14fdd1b11ff50a6fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10879 Malicious code in ap-components-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b75060f671ee7ecddf3938775343212154c5eb91d9e4fba478a1f6062457b9c8 The OpenSSF Package Analysis project identified 'ap-components-react' @ 3.15.9 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-10877 Malicious code in newpipv3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 54fac2a807bae6742d82c86f55d97a1b4a810e42ee3b0b9dcb0c981c36ab712d The OpenSSF Package Analysis project identified 'newpipv3' @ 0.1.0 pypi as malicious. It is considered malicious because: - The package...

Malicious code in newpipv3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 54fac2a807bae6742d82c86f55d97a1b4a810e42ee3b0b9dcb0c981c36ab712d The OpenSSF Package Analysis project identified 'newpipv3' @ 0.1.0 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-10890 Malicious code in webpack-svg-spirit-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e06e486295eccd406df5d378ae3d70ad72e5be5dad6bd5d99fde1d16e324f5af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...