MAL-2024-7771 Malicious code in express-jwt-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fe7d6a9d5298553234316cd7fd21bd7ac74d55c02a1e156505dd54dc8944e648 The OpenSSF Package Analysis project identified 'express-jwt-v6' @ 6.0.6 npm as malicious. It is considered malicious because: - The package...

TAG-100: New Threat Actor Uses Open-Source Tools for Widespread Attacks

Unknown threat actors have been observed leveraging open-source tools as part of a suspected cyber espionage campaign targeting global government and private sector organizations. Recorded Future's Insikt Group is tracking the activity under the temporary moniker TAG-100, noting that the adversar...

MAL-2024-7763 Malicious code in mock_simple_module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eaed9bf47a3711f757443a62c5b348e369a86608eb2038f307aa88e8f2f4e710 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in globalstyling (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ee2731f771d38fb75a623ac5b3107d1b89202dab21cfa974698f5382567510e6 The OpenSSF Package Analysis project identified 'globalstyling' @ 100.69.69 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7746 Malicious code in inline-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f9b4dc3b900cda7b3ddba48442ae448f1af310a11854f024134f391baafb62d8 The OpenSSF Package Analysis project identified 'inline-icons' @ 70.69.69 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7745 Malicious code in icca-core-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 47b406325b3f53507e65da352c268d0102771c0241dc5c0e1595b7493e72ef68 The OpenSSF Package Analysis project identified 'icca-core-lib' @ 1.0.8 npm as malicious. It is considered malicious because: - The package...

Malicious code in pewspwnrepo4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e19195a9e0daa1405f9c055a13cf7164173d64c6dcb74f8ecb42b2a49b717b97 The OpenSSF Package Analysis project identified 'pewspwnrepo4' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

CVE-2024-39250

creationtimestamp| type| source ---|---|--- 2024-07-13 20:31:48+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7974 2024-07-22 22:50:52+00:00| seen| https://t.me/cvedetector/1478...

Malicious code in alemmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e6439e28d1fe4888d5ea2c3c0bdfa9512092b20d6b0001069f0236329edab410 The OpenSSF Package Analysis project identified 'alemmi' @ 11.0.0 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2024-7740 Malicious code in alemmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e6439e28d1fe4888d5ea2c3c0bdfa9512092b20d6b0001069f0236329edab410 The OpenSSF Package Analysis project identified 'alemmi' @ 11.0.0 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2024-7733 Malicious code in browserlist-config-usaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 02d306368aa4feefa13bbaf28e12d66c8517a1f1e0a4f08e72afd9001d2b2cdb The OpenSSF Package Analysis project identified 'browserlist-config-usaa' @ 9.9.9 npm as malicious. It is considered malicious because: - The...

MAL-2024-7731 Malicious code in etp-config-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 22e9cd622d75b3bb30c9c31a8dcf71c38fc832db9306ad6ed4f9411bc5321c01 The OpenSSF Package Analysis project identified 'etp-config-store' @ 200.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in cx-api-client-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 315d3186e692fd6934de0d66c25255e03eb763a15daa0785e92e58a2abbbba60 The OpenSSF Package Analysis project identified 'cx-api-client-lite' @ 200.0.1 npm as malicious. It is considered malicious because: - The packa...

Malicious code in two-column-image-text-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 816a60cffab8a3e09e7bdd3135a8d8fdb6bca092a94ec723a64d7aecd057d471 The OpenSSF Package Analysis project identified 'two-column-image-text-grid' @ 69.69.69 npm as malicious. It is considered malicious because: -...

MAL-2024-7695 Malicious code in two-column-image-text-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 816a60cffab8a3e09e7bdd3135a8d8fdb6bca092a94ec723a64d7aecd057d471 The OpenSSF Package Analysis project identified 'two-column-image-text-grid' @ 69.69.69 npm as malicious. It is considered malicious because: -...

CISA Releases Advisory Detailing Red Team Activity During Assessment of US FCEB Organization, Highlighting Necessity of Defense-in-Depth

Today, CISA released CISA Red Team’s Operations Against a Federal Civilian Executive Branch Organization Highlights the Necessity of Defense-in-Depth in coordination with the assessed organization. This Cybersecurity Advisory CSA details key findings and lessons learned from a 2023 assessment,...

Malicious code in dependencyconfusion7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0f7917b183eaefa5d99ccf1984a0d7b5fec312946bc51784c3c850ef10676c89 The OpenSSF Package Analysis project identified 'dependencyconfusion7' @ 2.0.0 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-7747 Malicious code in @mariott/mi-headless-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 052067d97e0b49250cecab16aa79fa0a7dec5cb225d908a93dc9db97fb2f74d1 The OpenSSF Package Analysis project identified '@mariott/mi-headless-utils' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-7693 Malicious code in sap-attribute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6a5de89e4dd90b8b85bea5f4512df328d5a6a7c1aea2f79b4f8d3307e2328af8 The OpenSSF Package Analysis project identified 'sap-attribute' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-appid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6320c6ca957bf59f7842fdf23a8839fb30c8aee7f82d14bc2066d1c4d1505b11 The OpenSSF Package Analysis project identified 'sap-appid' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...