Threat Actors Increasingly Abusing GitHub for Malicious Purposes

The ubiquity of GitHub in information technology IT environments has made it a lucrative choice for threat actors to host and deliver malicious payloads and act as dead drop resolvers, command-and-control, and data exfiltration points. "Using GitHub services for malicious infrastructure allows...

Horner Automation Cscape

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Horner Automation Equipment : Cscape Vulnerability : Stack-Based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code. 3. TECHNICAL...

CVE-2023-51957

creationtimestamp| type| source ---|---|--- 2024-01-10 16:32:16+00:00| seen| https://t.me/ctinow/165914 2024-01-13 08:17:01+00:00| seen| https://t.me/ctinow/167732 2024-01-28 14:26:37+00:00| seen| https://t.me/ctinow/174946...

CVE-2024-0389

creationtimestamp| type| source ---|---|--- 2024-01-10 15:31:59+00:00| seen| https://t.me/ctinow/165860 2024-01-17 21:16:22+00:00| seen| https://t.me/ctinow/169464 2024-01-28 08:56:20+00:00| seen| https://t.me/ctinow/174860...

MAL-2024-55 Malicious code in internal-test-devoxx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fb92a072265a550a5ce1cc1d16f096b636845bc8edabaf60bddfebad43c423bd The OpenSSF Package Analysis project identified 'internal-test-devoxx' @ 0.0.4 npm as malicious. It is considered malicious because: - The packa...

CVE-2024-0357

creationtimestamp| type| source ---|---|--- 2024-01-10 02:26:34+00:00| seen| https://t.me/ctinow/165501 2024-01-26 12:11:24+00:00| seen| https://t.me/ctinow/174176 2025-06-13 19:34:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18327...

Malicious code in onetake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 52bec93f09b5dc6085214609ef35d8aaf2346d6e50e6a12e5304e16aa3493ae2 The OpenSSF Package Analysis project identified 'onetake' @ 1.1.30 npm as malicious. It is considered malicious because: - The package...

MAL-2024-50 Malicious code in optimistic-cart-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0518690394723fc9bf03f60d8192f09e4133e8398d94ec7b04d2fa9ac26796be The OpenSSF Package Analysis project identified 'optimistic-cart-ui' @ 0.99.99 npm as malicious. It is considered malicious because: - The packa...

GHSA-C2F4-CVQM-65W2

creationtimestamp| type| source ---|---|--- 2024-01-08 17:12:01+00:00| seen| https://t.me/ctinow/164496 2024-01-25 12:11:24+00:00| seen| https://t.me/ctinow/173396...

CVE-2023-38623

creationtimestamp| type| source ---|---|--- 2024-01-08 16:32:17+00:00| seen| https://t.me/ctinow/164461 2024-01-11 08:16:25+00:00| seen| https://t.me/ctinow/166341...

Frequent donations can cause DOS

Lines of code Vulnerability details Impact User's might be unable to withdraw pending rewards Proof of Concept If a donation is made before the checkpoint call in the same block, the checkpoint call will revert. This is done in order to prevent flash loans. function checkpoint external returns bo...

griefer can create maximum length time locks for other users with only dust

Lines of code Vulnerability details Description veOLAS is the voting token for the OLAS protocol. It functions like the curve.fi voting token in that a user gets more votes the longer they lock their tokens. A user can create a lock for themselves or have another user create a lock for them, usin...

MAL-2024-45 Malicious code in dont-install-me0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bcf8126d43ca2823d8d0d521cade7b0889b21af7135c79116a1f03139011cf43 The OpenSSF Package Analysis project identified 'dont-install-me0' @ 1.2.3 npm as malicious. It is considered malicious because: - The package...

MAL-2024-65 Malicious code in replit-extensions-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7462f6e9b4a4fb60632168e7333f43126c172c42dbe957ea9288df7461840fa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-61 Malicious code in akshansh-jaiswal-ctf-security (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1a21cd8cd0f3e40599808c19641304a3f52f263a31d9b68e9847bc4c6933cc80 The OpenSSF Package Analysis project identified 'akshansh-jaiswal-ctf-security' @ 99.9999.9999 npm as malicious. It is considered malicious...

MAL-2024-44 Malicious code in noblox.js-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 241387eedcc17cd69cbec9253b8a7e8449b25301def93cef2479e6f012619398 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in noblox.js-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 241387eedcc17cd69cbec9253b8a7e8449b25301def93cef2479e6f012619398 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-6755

creationtimestamp| type| source ---|---|--- 2024-01-07 03:36:30+00:00| seen| https://t.me/ctinow/164053...

MAL-2024-41 Malicious code in deep-search-exports-directory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05115bc38d2b7d646eb62c3541059ec47a535e35fad54010bcc53578fe1c7099 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shopify-netsuite-connector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 919f178c1babb3617b441fcbb027dc9d2cf016de6b83c433bcda9d481a350394 The OpenSSF Package Analysis project identified 'shopify-netsuite-connector' @ 99.999999.99990 npm as malicious. It is considered malicious...