CVE-2024-50259

In the Linux kernel, the following vulnerability has been resolved: netdevsim: Add trailing zero to terminate the string in nsimnexthopbucketactivitywrite This was found by a static analyzer. We should not forget the trailing zero after copyfromuser if we will further do some string operations,...

MAL-2024-10540 Malicious code in aseemnpmk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4ea49246d59dff6f14c706b43c01a3cbda0e247126a5d67c6e91428922445f1e The OpenSSF Package Analysis project identified 'aseemnpmk' @ 99.99.90 npm as malicious. It is considered malicious because: - The package...

Malicious code in @bytedanc-ad/mui-vue2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c30379ad4ca7a644dc00d7fe6583a1f268e6fb8e076179cf094519d27cf2dc54 The OpenSSF Package Analysis project identified '@bytedanc-ad/mui-vue2' @ 89.3.5 npm as malicious. It is considered malicious because: - The...

MAL-2024-10465 Malicious code in @bytedanc-ad/mui-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b302cda103ab4e9d60bced8da79df7126ab12cceee30b5ca171d20bc10c1a77 The OpenSSF Package Analysis project identified '@bytedanc-ad/mui-react' @ 89.3.5 npm as malicious. It is considered malicious because: - The...

MAL-2024-10487 Malicious code in eslint-config-finance-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44cf24ec398ed242a5fc401c66a004a81c91e4bf0f9fe2e685c03d4d788be011 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10486 Malicious code in eslint-config-finance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d12427cc293ba0b610fa9341045e6d546b05be734e8b9b3135136720e183f04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in easy-transify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis da33e7bf1f97126745cda88021b8ac2884cd095a84a70caaf6938bb505f3f5df The OpenSSF Package Analysis project identified 'easy-transify' @ 7.2.3 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10483 Malicious code in easy-transify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis da33e7bf1f97126745cda88021b8ac2884cd095a84a70caaf6938bb505f3f5df The OpenSSF Package Analysis project identified 'easy-transify' @ 7.2.3 npm as malicious. It is considered malicious because: - The package...

PT-2024-32302 · Winshot · Winshot

Name of the Vulnerable Software and Affected Versions: Inshot com.downloader.privatebrowser aka Video Downloader - XDownloader versions 1.3.5 and earlier Description: The issue allows an attacker to execute arbitrary JavaScript code via the com.downloader.privatebrowser.activity.PrivateMainActivi...

Malicious code in compresai (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 eff61bf37f16806690cbf9520f29f4e65c1619fb07bf01ccbb8c3c830f501736 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in oclip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dc21e51bf306056c1f7386f6e7baeeec043f05fad768571f28624da41dd7b038 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in paws-room-acoustics-simulator (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 445343e49b96223100e6e2d17e72f3cead8dedeeac8f6250e2b3b66b52c694e4 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in fc-clip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e13c5bc599f0fffb5c78c22855a708ec4b4d9e4ecafc4868d45f1be980a6d519 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in mega-sparks (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8c8a06caf135ca489f44971a80962aeffd09ee3fe5c5f64c470012d39272d263 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in imageoi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8b4ddf73f040b40324bb56a909192cf62fd46f0a4e71730304476d8c558be72d A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in rl-vm-scheduling (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8870fa73789eeccaedbe34d9bcf74ee3b438699c49a0e5b984055bcb5c86542f A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in compressi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ade0c38afdca5e7d87d6c3ecf059ed4a65e27587be0bff2287cbf4aa3474b536 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in deepsolid (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bd495f31431e621d5ce9440e408d5b86e69cf6545ab1cff1eff26ff87b0a4d08 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in pyyal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 85587f160dc4e7bcc19305fd294a77bf8256a3efb5e70b8ec84c94994edfb2a5 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in netobs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 14480b5317baa8a903d35907265eac5d1e36af264c893920ac52fff04a106359 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...