10246 matches found
Malicious code in pillar-lifi-zap (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f6752cdfc26aa682f3cbce0cfb7c709c97f885cbfae33367ffa76e599a041393 The OpenSSF Package Analysis project identified 'pillar-lifi-zap' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Attacks, Vulnerabilities and Actors 20 November to 26 November 2023
For a detailed threat digest, download the pdf file here Summary HiveForce Labs has recently made several significant discoveries related to cybersecurity threats. Over the past week, we identified a total of eight executed attacks, six instances of adversary activity, and one exploited...
MAL-2023-8619 Malicious code in oddsfire-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6560345fe7b94e452865d383a96b49b27e71c7113505ddfd5306218da9648d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in moonpig (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bf064eedf0d80bc14ce31e1deee2fd824472437a9fa79fb15602d6b09c478d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-49103
creationtimestamp| type| source ---|---|--- 2023-11-22 17:10:53+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5912 2023-11-23 07:46:50+00:00| published-proof-of-concept| https://t.me/proxybar/1841 2023-11-23 09:27:42+00:00| seen|...
MAL-2023-8593 Malicious code in discord.js-ytsong (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e2a418dfc51b91035c5d81a2c0db02d6b1046f551e8ef927489b47196cc3e8d0 The OpenSSF Package Analysis project identified 'discord.js-ytsong' @ 3.4.2 npm as malicious. It is considered malicious because: - The package...
Malicious code in discord.js-ytsong (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e2a418dfc51b91035c5d81a2c0db02d6b1046f551e8ef927489b47196cc3e8d0 The OpenSSF Package Analysis project identified 'discord.js-ytsong' @ 3.4.2 npm as malicious. It is considered malicious because: - The package...
MAL-2023-8563 Malicious code in azureml-contrib-daskonbatch (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fbb97c227c663215810abd8867643e6709416bf4e16526391cc0c740f9dce047 The OpenSSF Package Analysis project identified 'azureml-contrib-daskonbatch' @ 1.0.0 pypi as malicious. It is considered malicious because: - T...
Malicious code in pod-financier-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25becd0bffc0a2685831f2227d4ee97a1b406d60a899f7c683bfb4fa5af4e1f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ory-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10ee2bc9e167728f46f301228a2569bcd7eda2f19c27f24784dd4497cf1af3be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8554 Malicious code in ory-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10ee2bc9e167728f46f301228a2569bcd7eda2f19c27f24784dd4497cf1af3be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in basegulpfile (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 059ea7a541217919c3a9813f74ff60d917771f2dcd25ce7dee9fb33fc964d16c The OpenSSF Package Analysis project identified 'basegulpfile' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2023-8551 Malicious code in basegulpfile (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 059ea7a541217919c3a9813f74ff60d917771f2dcd25ce7dee9fb33fc964d16c The OpenSSF Package Analysis project identified 'basegulpfile' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in wehackreposss (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 886efcb413ccb918dc087a951fa61416e8b1175b0ea3009a4e273b62067fe385 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8541 Malicious code in discord.js-song (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 90ad9bfacffe2ec987335c33f6ec3024291b2cc98ae356cbc0f16a4051ec79b9 The OpenSSF Package Analysis project identified 'discord.js-song' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...
LummaC2 Malware Deploys New Trigonometry-Based Anti-Sandbox Technique
The stealer malware known as LummaC2 aka Lumma Stealer now features a new anti-sandbox technique that leverages the mathematical principle of trigonometry to evade detection and exfiltrate valuable information from infected hosts. The method is designed to "delay detonation of the sample until...
The dark side of Black Friday: decoding cyberthreats around the year’s biggest shopping season
As the annual Black Friday approaches, the digital landscape experiences an unprecedented surge in e-commerce and online shopping activity. Major sales aside, e-commerce is still a huge market. In 2022, global e-commerce retail revenue was estimated to reach $5.7 trillion worldwide, marking nearl...
GHSA-QJMX-Q5M4-XQF5 Cross-site Scripting in OpenCRX
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field...
