MAL-2024-10373 Malicious code in nurst (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ebc947e96588d0b0b3e06e9a4be04b7f86c8dedf4716471a19bf7c1c20144cbf A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in nuerst (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 155c4cfe70e7c556175ba3cc4e0c00815168e4e3a8b161ca72c0fcde99079ed1 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in bebitmf (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 74b4aea64b0811889f65fa66cb611912e1ff91bb08f22d2e0b3b5c9b8a179a63 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10363 Malicious code in x2vml-gml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c0a24139221a012c1dcb193331f49469571c2400d49c53489603dd68b26698e6 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in v2mlx-gml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 00b9359396313be6a33f8efe51b60793b58c9f0cb6d2862e074d4109c33c107f A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in v2xlm-gml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7fbdd4767b759c720bb13db759299986734471ff1064c52f7d25110c8e9aa617 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10359 Malicious code in lightseqe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6f3ebdee7f587049da541169c6218b3bade3e1ce54144846f1f16c39fa8594d6 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10350 Malicious code in chameleon-sdk-android (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 589be22e021ff78ea28c1042adb0a595cec7ba04c5c4050009471dcd91d7de2c The OpenSSF Package Analysis project identified 'chameleon-sdk-android' @ 9.3.5 npm as malicious. It is considered malicious because: - The...

Malicious code in cml-tt-sets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cf782b7bdc62c7fa7743c5fafc916bcd3c20ec2c23d89837b120d35d53659e6b The OpenSSF Package Analysis project identified 'cml-tt-sets' @ 9.3.5 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10353 Malicious code in semi-d2c (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 903534f26ef3e66645d16589e9db352586dcb5630c7b314a5466e66f37e0cfa3 The OpenSSF Package Analysis project identified 'semi-d2c' @ 9.3.5 npm as malicious. It is considered malicious because: - The package...

Malicious code in semi-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 05640460dfefb40e49d1b9fcfa054fabedc4ccdff887981a44f2f1e760b23661 The OpenSSF Package Analysis project identified 'semi-design' @ 9.3.5 npm as malicious. It is considered malicious because: - The package...

Google Warns of Actively Exploited CVE-2024-43093 Vulnerability in Android System

Google has warned that a security flaw impacting its Android operating system has come under active exploitation in the wild. The vulnerability, tracked as CVE-2024-43093, has been described as a privilege escalation flaw in the Android Framework component that could result in unauthorized access...

PT-2024-34678 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: Huawei HarmonyOS version 5.0.0 Description: The issue is a race condition vulnerability in the kernel network module. Successful exploitation of this vulnerability may affect availability, potentially leading to system compromise...

MAL-2024-10324 Malicious code in finsys-webcomponent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cce4759dae5c3e0526e14affa1a1dc24fd8a3f8189dc1c85bfdbb88cde5a7319 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10321 Malicious code in appdynamics-protobuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37a52fe7743188afac58b43269afe61a049bed39642c33558912976f5d73757e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10323 Malicious code in bridgetrack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76ad310435d9166777216b86549a2cd213058a9685054980163c822e035185eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10328 Malicious code in sc-meta-layer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e8afeccfd77a3b36e9c24aa1057807ba8f2a18972791b3cbc857e3d961e60d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10313 Malicious code in evernote-thrift (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0cafc1fbe5d3aca2d0d736873649060e6c9dce551db713b3d91723a78f9a2f22 The OpenSSF Package Analysis project identified 'evernote-thrift' @ 1.4.8 npm as malicious. It is considered malicious because: - The package...

Malicious code in @captivateiq/random (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ee1cb55ec1b56be298aa872d3923e32e94edea10bbe8563c0ecd12a0d93cf7f7 The OpenSSF Package Analysis project identified '@captivateiq/random' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...

Malicious code in @captivateiq/events (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8fc4737a464a63150ee660fef685ac907d15745ab89d4dea2872f3896362f599 The OpenSSF Package Analysis project identified '@captivateiq/events' @ 19.3.9 npm as malicious. It is considered malicious because: - The packa...