MAL-2024-7840 Malicious code in testjsonn2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0d75d52ae07c9c9e2e6b773f2806c66631dd764da793bac0559e65bc4d0e7f66 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-ronnyfredd-exfiltr-clipboard Reasons based on the...

MAL-2024-7839 Malicious code in testjsonn1 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d8b57f71eadeb645df871ae41a475cb9a8ba647679e7455f66e0c9e9b5627651 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-ronnyfredd-exfiltr-clipboard Reasons based on the...

MAL-2024-7778 Malicious code in oj-odcs-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a6c15cc75636529a58d1e70b3731207bdde080965ec886c0fa3a651f3d49f58a The OpenSSF Package Analysis project identified 'oj-odcs-common' @ 3.3.0 npm as malicious. It is considered malicious because: - The package...

CVE-2024-37561

creationtimestamp| type| source ---|---|--- 2024-07-20 13:07:33+00:00| seen| Telegram/5Kk8k0O4qjsn37QEX8o3GVGulSq5qZe2jBNlH5G9bFkQ...

Malicious code in @celigo/fuse-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c7e04fe72ce959885707ec66262560851804147d1a6816565ff868c45a652c38 The OpenSSF Package Analysis project identified '@celigo/fuse-ui' @ 9.7.7 npm as malicious. It is considered malicious because: - The package...

Malicious code in fireauth.args (npm)

The package exfiltrates data to an oastify domain. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c601f7d41a9166b7e84595a25e727e5256c0962af730ee336a07eac2b1e7fe40 The OpenSSF Package Analysis project identified 'fireauth.args' @ 71.69.69 npm as malicious. ...

MAL-2024-7774 Malicious code in fe-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f10193d263c551e806779906e66b796c66043d73893719ea555b3c822b27adc4 The OpenSSF Package Analysis project identified 'fe-bootstrap' @ 70.69.69 npm as malicious. It is considered malicious because: - The package...

CVE-2024-6338

creationtimestamp| type| source ---|---|--- 2024-07-19 11:11:29+00:00| seen| https://t.me/cvedetector/1201...

MAL-2024-7772 Malicious code in marvinjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 965b7b4455eec757889260ad7d11671ee747f1d78f5ccca323303d223f246c43 The OpenSSF Package Analysis project identified 'marvinjs' @ 5.5.6 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7771 Malicious code in express-jwt-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fe7d6a9d5298553234316cd7fd21bd7ac74d55c02a1e156505dd54dc8944e648 The OpenSSF Package Analysis project identified 'express-jwt-v6' @ 6.0.6 npm as malicious. It is considered malicious because: - The package...

TAG-100: New Threat Actor Uses Open-Source Tools for Widespread Attacks

Unknown threat actors have been observed leveraging open-source tools as part of a suspected cyber espionage campaign targeting global government and private sector organizations. Recorded Future's Insikt Group is tracking the activity under the temporary moniker TAG-100, noting that the adversar...

MAL-2024-7763 Malicious code in mock_simple_module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eaed9bf47a3711f757443a62c5b348e369a86608eb2038f307aa88e8f2f4e710 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in globalstyling (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ee2731f771d38fb75a623ac5b3107d1b89202dab21cfa974698f5382567510e6 The OpenSSF Package Analysis project identified 'globalstyling' @ 100.69.69 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7746 Malicious code in inline-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f9b4dc3b900cda7b3ddba48442ae448f1af310a11854f024134f391baafb62d8 The OpenSSF Package Analysis project identified 'inline-icons' @ 70.69.69 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7745 Malicious code in icca-core-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 47b406325b3f53507e65da352c268d0102771c0241dc5c0e1595b7493e72ef68 The OpenSSF Package Analysis project identified 'icca-core-lib' @ 1.0.8 npm as malicious. It is considered malicious because: - The package...

Malicious code in pewspwnrepo4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e19195a9e0daa1405f9c055a13cf7164173d64c6dcb74f8ecb42b2a49b717b97 The OpenSSF Package Analysis project identified 'pewspwnrepo4' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

CVE-2024-39250

creationtimestamp| type| source ---|---|--- 2024-07-13 20:31:48+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7974 2024-07-22 22:50:52+00:00| seen| https://t.me/cvedetector/1478...

Malicious code in alemmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e6439e28d1fe4888d5ea2c3c0bdfa9512092b20d6b0001069f0236329edab410 The OpenSSF Package Analysis project identified 'alemmi' @ 11.0.0 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2024-7740 Malicious code in alemmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e6439e28d1fe4888d5ea2c3c0bdfa9512092b20d6b0001069f0236329edab410 The OpenSSF Package Analysis project identified 'alemmi' @ 11.0.0 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2024-7733 Malicious code in browserlist-config-usaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 02d306368aa4feefa13bbaf28e12d66c8517a1f1e0a4f08e72afd9001d2b2cdb The OpenSSF Package Analysis project identified 'browserlist-config-usaa' @ 9.9.9 npm as malicious. It is considered malicious because: - The...