MAL-2024-8853 Malicious code in roblox-event-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f08f30c6d48fad2d39e96f192eb0efb0ae97511a98d6ef6b3048b20486f7c30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8850 Malicious code in azure-iothub-service-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 39be68a1794d85382ecb02d31e4d56c310788c3eb8f0f552d464410ec90138a5 The OpenSSF Package Analysis project identified 'azure-iothub-service-client' @ 0.0.2 npm as malicious. It is considered malicious because: - Th...

Malicious code in video.min (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1b2a0713372942343830cd53ad3ad5ffe4dcf7e827523510ef79e32b38f67db3 The OpenSSF Package Analysis project identified 'video.min' @ 1.0.22 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8848 Malicious code in balvant-chavda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2a4352948540614eef450d227df439f2f1c0d1da030df382e59831548767f473 The OpenSSF Package Analysis project identified 'balvant-chavda' @ 1.8.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8839 Malicious code in @pd-mfe/framework-request-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 67d85dc3369a40dca0564619e91845710660a0cf77ca76303f641e1b20c5876e The OpenSSF Package Analysis project identified '@pd-mfe/framework-request-context' @ 99.50.55 npm as malicious. It is considered malicious...

MAL-2024-8841 Malicious code in @sky-team/create-project-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c63ed97fa2890cd36683d943cad94b27fa57e5a87b9b16fa38a55970163af5a1 The OpenSSF Package Analysis project identified '@sky-team/create-project-modal' @ 99.50.55 npm as malicious. It is considered malicious because...

MAL-2024-8838 Malicious code in @zarafront/lib-zds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b7da81ddf52154f443baa27b56764a0be023447376bd6d8a3f587cc7db455f84 The OpenSSF Package Analysis project identified '@zarafront/lib-zds' @ 99.50.55 npm as malicious. It is considered malicious because: - The...

MAL-2024-8836 Malicious code in @warnermediacode/wme-gep-modules-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a4a72f149d9eb6781982bac5c0c9283126ceab07ead60b9298ffb1c9f889ca8a The OpenSSF Package Analysis project identified '@warnermediacode/wme-gep-modules-bundle' @ 99.50.55 npm as malicious. It is considered maliciou...

Malicious code in colourfulls (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 735ca3ff38b76e7b11c1f7b884880871427299042e250bb42e17dcf66b8c8e11 Once imported, the module attempts to download an executable, put into Discord directory and most probably trick discord to start it. The download link does no...

Malicious code in ioiwds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 494e4b2b84945fc74e1e445a920046bb23d44ae5bbedb8d1ff988a9899234272 The OpenSSF Package Analysis project identified 'ioiwds' @ 9.0.0 npm as malicious. It is considered malicious because: - The package communicate...

MAL-2025-5239 Malicious code in youreallydontwantthispackage2132 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 594e65e2115609e28b51abcb8b97695199a1eda6a4b72b2513bef87f5a74a211 Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...

MAL-2024-11248 Malicious code in gwinpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fdd3f3646435d9d7857a19999ffa38cdb99c04b4aa62177b1df6f2710b5412b3 Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...

MAL-2025-4665 Malicious code in grpc-google-bigtable-v2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9640f0015404a6fff13b4e9bbb9e01d3d4f545a8ae8935dc95425a427c561576 Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...

MAL-2024-9446 Malicious code in flag-leak-r (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 88c1df06a02daf1a911f895df0bd495b0f0d2e72f3b9ad45fe5a837575379c9e Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...

Malicious code in gwinpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fdd3f3646435d9d7857a19999ffa38cdb99c04b4aa62177b1df6f2710b5412b3 Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...

Pavel Durov Criticizes Outdated Laws After Arrest Over Telegram Criminal Activity

Telegram CEO Pavel Durov has broken his silence nearly two weeks after his arrest in France, stating the charges are misguided. "If a country is unhappy with an internet service, the established practice is to start a legal action against the service itself," Durov said in a 600-word statement on...

Malicious code in testcafe-reporter-ayx-reportportal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 56e9fb2a7d91d090c5daebf11bf839a8c406149a5eb97098ced6820c0285e4ea The OpenSSF Package Analysis project identified 'testcafe-reporter-ayx-reportportal' @ 3.9.11 npm as malicious. It is considered malicious...

MAL-2024-8820 Malicious code in testcafe-reporter-ayx-reportportal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 56e9fb2a7d91d090c5daebf11bf839a8c406149a5eb97098ced6820c0285e4ea The OpenSSF Package Analysis project identified 'testcafe-reporter-ayx-reportportal' @ 3.9.11 npm as malicious. It is considered malicious...

MAL-2024-8819 Malicious code in 0g-storage-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 189712c4a0b96b9447f3a3e68e5883de6303d027035935681f2341e68eeccc3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

FBI, CISA, NSA, and US and International Partners Release Advisory on Russian Military Cyber Actors Targeting US and Global Critical Infrastructure

Today, the Federal Bureau of Investigation FBI—in partnership with CISA, the National Security Agency NSA, and other U.S. and international partners—released a joint Cybersecurity Advisory Russian Military Cyber Actors Target U.S. and Global Critical Infrastructure. This advisory provides...