CVE-2023-51441

creationtimestamp| type| source ---|---|--- 2024-01-06 13:21:23+00:00| seen| https://t.me/ctinow/163925 2024-01-08 20:38:46+00:00| published-proof-of-concept| https://t.me/arpsyndicate/2680 2024-01-24 15:16:36+00:00| seen| https://t.me/ctinow/172825...

Malicious code in axis-common-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d46e6aa49acd26b8f52fc1e1d11ffa3fb20d5efa8e9648fb414a0c25aaa81480 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-33 Malicious code in d5-es6-sass-boilerplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3090df994b516cfc30ee58cc5871282f61ebc4e378a73744fb779705e16a1a35 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

23andMe blames “negligent” breach victims, says it’s their own fault

In a surprising move, in a letter to legal representatives of victims of the recent 23andMe data breach, the company has laid the blame at the feet of victims themselves. 23andMe even goes as far as to claim that this wasn’t a data breach at 23andMe at all. The reasoning: “… unauthorized actors...

Attacks, Vulnerabilities and Actors 25 December to 31 December 2023

For a detailed threat digest, download the pdf file here Summary HiveForce Labs has recently made several significant discoveries related to cybersecurity threats. Over the past week, we identified a total of eight executed attacks, four instances of adversary activity, and five exploited...

CVE-2023-47574

creationtimestamp| type| source ---|---|--- 2024-01-04 10:11:18+00:00| seen| https://t.me/ctinow/162872...

Mandiant's Twitter Account Restored After Six-Hour Crypto Scam Hack

American cybersecurity firm and Google Cloud subsidiary Mandiant had its X formerly Twitter account compromised for more than six hours by an unknown attacker to propagate a cryptocurrency scam. As of writing, the account has been restored on the social media platform. It's currently not clear ho...

MAL-2024-23 Malicious code in snapfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 243c20cf789fbcfb3e3ba11a25b91aef2e8dfb1498fec76a215c1d04b1265343 The OpenSSF Package Analysis project identified 'snapfish' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-22 Malicious code in stupidrara (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3893054db7f136842c9eb85d9d6c2693ee9afa0f397ef3a30c14736aae381261 The OpenSSF Package Analysis project identified 'stupidrara' @ 0.0.0-jqNHd5ZlNt7p7qpN npm as malicious. It is considered malicious because: - Th...

MAL-2024-21 Malicious code in casino-prismic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 906aeb8612a57f084f489c6478da61b9c148272104fed2d5838a07b97704cd26 The OpenSSF Package Analysis project identified 'casino-prismic' @ 4.6.8 npm as malicious. It is considered malicious because: - The package...

RHSA-2024:0029

creationtimestamp| type| source ---|---|--- 2024-01-02 17:17:31+00:00| seen| https://t.me/ctinow/161897...

MAL-2024-3 Malicious code in hubl-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c48b757cf4e86cc97abb28765fdf3f0a2205e99bbcf856ec3904b7e02038fea0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-2 Malicious code in @cartus-core/cartus-common-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 00ecedfab923e26d9afa1c15157b18d4f9662f062ffec7f4ce93ece0426eeeda The OpenSSF Package Analysis project identified '@cartus-core/cartus-common-ui' @ 11230000951.0.1 npm as malicious. It is considered malicious...

MAL-2024-1 Malicious code in squaredev-next-online-payments-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c12aadbc7b6d08bd4746e705c7507074eb759ac60f260bdf9a59cd85d966a45b The OpenSSF Package Analysis project identified 'squaredev-next-online-payments-example' @ 99.0.0 npm as malicious. It is considered malicious...

CVE-2023-7184

creationtimestamp| type| source ---|---|--- 2023-12-31 12:26:31+00:00| seen| https://t.me/ctinow/161071 2024-01-01 01:31:54+00:00| seen| https://t.me/cibsecurity/74066 2024-01-22 08:06:48+00:00| seen| https://t.me/ctinow/171018...

CVE-2023-48122

creationtimestamp| type| source ---|---|--- 2023-12-31 10:16:51+00:00| seen| https://t.me/ctinow/161046...

CVE-2023-52284

creationtimestamp| type| source ---|---|--- 2023-12-31 07:26:52+00:00| seen| https://t.me/ctinow/160993 2024-01-01 01:30:55+00:00| seen| https://t.me/cibsecurity/74054 2024-01-08 23:17:24+00:00| seen| https://t.me/ctinow/164697 2024-01-22 10:11:20+00:00| seen| https://t.me/ctinow/171065...

MAL-2023-8775 Malicious code in ngx-ndbx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b85b4ba8a7146a1450ff0a1cc8b119bda90a838d67b93d8ad4f080551bfe002e The OpenSSF Package Analysis project identified 'ngx-ndbx' @ 18.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8776 Malicious code in discord.js-self-v22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 672d9ccd18153a9163f1f9a63ec5d765f412cf86a198d526fb04ecc5aa6eab3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8774 Malicious code in unit-testing-controllers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 206ebabfab4ea20b85ed6293c085ea8a6c0c0d85a70a1616a1963ac8556cf315 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...