10205 matches found
MAL-2024-9417 Malicious code in yogergerherhme (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 364b3cb8f528aa44006944727caef3a2de94ca68d931e97cd82abcb3f2bc8197 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9411 Malicious code in gerhtregefdsr (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 757aeb95f7403878b8830eb0255be7e2247dc80b446387efa2932304ec69fcfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9406 Malicious code in @safecorp/one-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9e0af8fba7ea4479d8e7a1cf1095346b605e9a718d6fd663ad9ee38130d12d6d The OpenSSF Package Analysis project identified '@safecorp/one-ui' @ 10.10.10 npm as malicious. It is considered malicious because: - The packag...
MAL-2024-9405 Malicious code in module-with-prebuild (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82d63a2684b4dce89fe62dddc35e9699b9a3473378f32fc8c13c1a1bdead8b02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9403 Malicious code in toolspacks (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d239c651cb854e2362266a5dda32897f7ac87b2c588562cb32654989daae4eb9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9407 Malicious code in j5gnpuiwerbngpiutbgn0iutb0p (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 0e410a6e975b8a7d6930f2fbde2be25a08fd2bc8995fc57d1794fc12eaf1e019 According to the description, packages should demonstrate the dependency confusion attack. The realisation is, in fact, a spamming with packages having as the...
Malicious code in iufgbewroibgfowiebc (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 06029514a813cf9b228f1be7c997bffc2510869a5f0130d6036fa63ee6ea2fbc According to the description, packages should demonstrate the dependency confusion attack. The realisation is, in fact, a spamming with packages having as the...
Hackers Abuse EDRSilencer Tool to Bypass Security and Hide Malicious Activity
Threat actors are attempting to abuse the open-source EDRSilencer tool as part of efforts to tamper endpoint detection and response EDR solutions and hide malicious activity. Trend Micro said it detected "threat actors attempting to integrate EDRSilencer in their attacks, repurposing it as a mean...
Malicious code in symphony-scatterplot (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e726ee689acd8462ec021757c373dfd8f62595dc76ea919971bdf13659a2d913 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9304 Malicious code in nuxtjs_dotenv (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dcd288c0cffc74a3b962530a540a7cc62f2288445fd2f50c7aded40160d08871 The OpenSSF Package Analysis project identified 'nuxtjsdotenv' @ 1.4.1 npm as malicious. It is considered malicious because: - The package...
CISA, FBI, NSA, and International Partners Release Advisory on Iranian Cyber Actors Targeting Critical Infrastructure Organizations Using Brute Force
Today, CISA—with the Federal Bureau of Investigation FBI, the National Security Agency NSA, and international partners—released joint Cybersecurity Advisory Iranian Cyber Actors Brute Force and Credential Access Activity Compromises Critical Infrastructure. This advisory provides known indicators...
MAL-2024-9300 Malicious code in aspera-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4ffc4efa392a68f9bbb7a8e63541c73ca6199c288c1ddf01880986017469166 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-21264
Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft component: Activity Guide Composer. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
YushuTechUnitreeGo1
Based on the provided code, it appears to be a Windows executable file PE file that contains a malicious payload. The file is encoded with a custom algorithm, making it difficult to analyze without decoding. The code is written in C and uses various techniques to evade detection, including: 1. Co...
Silent Threat: Red Team Tool EDRSilencer Disrupting Endpoint Security Solutions
Trend Micro's Threat Hunting Team has observed EDRSilencer, a red team tool that threat actors are attempting to abuse for its ability to block EDR traffic and conceal malicious activity...
MAL-2024-9288 Malicious code in blank-fe (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6eee7dd629fd54a1f09fdb48256d257595637f6596b2182b38bf01200ec08291 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9287 Malicious code in eslint-plugin-rossum (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 35e31ca4335b37c9acf1cc537c185f8c152911f991e75e3b8b248348d7f42e0a The OpenSSF Package Analysis project identified 'eslint-plugin-rossum' @ 7.7.7 npm as malicious. It is considered malicious because: - The packa...
Malicious code in mmpp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19e1d61143b91e405fc0bf1401f3def53b01efefc28bfed53a58995d4dd41153 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9282 Malicious code in huggingface-vscode (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 05d5f0f4f0cc4f4b8a99f6a6b4c1ca2e0aa13ab6cd2d0d7fd3e7a23a2d9593cb The OpenSSF Package Analysis project identified 'huggingface-vscode' @ 100.2.2 npm as malicious. It is considered malicious because: - The packa...
