Malicious code in testpentesting123xyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 36685d552523fa8f2d9de645b437d7cecf143d10232afb786da7ff9d224afc2a The OpenSSF Package Analysis project identified 'testpentesting123xyz' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...

Malicious code in mapbox-demo-gl-style-spec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa5a509685be972fc15ceb454b2c3768fd8dd7c5162f11471642ab34e1f34fb9 The OpenSSF Package Analysis project identified 'mapbox-demo-gl-style-spec' @ 14.4.0 npm as malicious. It is considered malicious because: - The...

Google Maps Timeline Data to be Stored Locally on Your Device for Privacy

Google has announced plans to store Maps Timeline data locally on users' devices instead of their Google account effective December 1, 2024. The changes were originally announced by the tech giant in December 2023, alongside updates to the auto-delete control when enabling Location History by...

MAL-2024-1537 Malicious code in e2e-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2cc0de9f1d67d84da5e112a98d424fc366b573aa24bc68ac638ae8fdab9ef1f9 The OpenSSF Package Analysis project identified 'e2e-frontend' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1532 Malicious code in client-onboarding (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 762eda8c988435ad6b160c429812de5a603401f5a6463f37bb48160ba53305b6 The OpenSSF Package Analysis project identified 'client-onboarding' @ 7.7.7 npm as malicious. It is considered malicious because: - The package...

Malicious code in client-onboarding (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 762eda8c988435ad6b160c429812de5a603401f5a6463f37bb48160ba53305b6 The OpenSSF Package Analysis project identified 'client-onboarding' @ 7.7.7 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1534 Malicious code in cpr-mfe (npm)

This package is considered malicious because it communicates with a domain associated with malicious activity and the package executes one or more commands associated with malicious behavior...

Snowflake Warns: Targeted Credential Theft Campaign Hits Cloud Customers

Cloud computing and analytics company Snowflake said a "limited number" of its customers have been singled out as part of a targeted campaign. "We have not identified evidence suggesting this activity was caused by a vulnerability, misconfiguration, or breach of Snowflake's platform," the company...

Snowflake Recommends Customers Take Steps to Prevent Unauthorized Access

On June 2, Snowflake indicated a recent increase in cyber threat activity targeting customer accounts on its cloud data platform. Snowflake issued a recommendation for users to query for unusual activity and conduct further analysis to prevent unauthorized user access. Users and administrators ar...

IT threat evolution in Q1 2024. Mobile statistics

IT threat evolution Q1 2024 IT threat evolution Q1 2024. Mobile statistics IT threat evolution Q1 2024. Non-mobile statistics Quarterly figures According to Kaspersky Security Network, in Q1 2024: 10.1 million attacks using malware, adware, or unwanted mobile software were blocked. The most commo...

Malicious code in wdio-api-client (npm)

This package is considered malicious because it communicates with a domain associated with malicious activity and the package executes one or more commands associated with malicious behavior...

Moodle Authenticated LFI risk in some misconfigured shared hosting environments

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore database activity modules and direct access to the web server outside of the Moodle webroot could execute a local file include...

CVE-2024-34005 moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_data backup

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore database activity modules and direct access to the web server outside of the Moodle webroot could execute a local file include...

CVE-2024-34005 moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_data backup

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore database activity modules and direct access to the web server outside of the Moodle webroot could execute a local file include...

MAL-2024-1398 Malicious code in drata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 646cbea8c3285f55f7f26b096cd9a63f91fdf4c4b06370aa92226ea3316bebba The OpenSSF Package Analysis project identified 'drata' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates...

MAL-2024-1396 Malicious code in numberpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e10120613afbbf32d487584c68eaf1ae7f4fc0674f1f119d86beae630a3b9070 The OpenSSF Package Analysis project identified 'numberpy' @ 0.1.0 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-1397 Malicious code in reqwestss (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1b49654324e091538657038a1288d05e2879c02d73bec38baeae681b0a26f5b9 The OpenSSF Package Analysis project identified 'reqwestss' @ 0.1.0 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-1395 Malicious code in pinyin-pra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9b8720c87d902e268ccf6e9db13f00285998cf35b280a6851ef9c3c23b3f0d6b The OpenSSF Package Analysis project identified 'pinyin-pra' @ 1.0.3 npm as malicious. It is considered malicious because: - The package...

PT-2024-25633 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore database activity modules and direct access to...

MAL-2024-1393 Malicious code in nespresso-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4df4d16cd100a965fef42c58150e9688849a5acfa8de2f809b3ed66f5ef9f29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...