PT-2023-31785 · WordPress · User Activity Log Pro

Name of the Vulnerable Software and Affected Versions: user-activity-log-pro WordPress plugin versions prior to 2.3.4 Description: The issue allows an attacker to manipulate the client IP address value by exploiting the plugin's retrieval of IP addresses from potentially untrusted headers. This c...

Discord, I Want to Play a Game

Discord, I Want to Play a Game By Ernesto Fernández Provecho and David Pastor Sanz Threatray · October 16, 2023 Discord is the first choice for gamers when they want to chat with some friends while playing an online computer game. Moreover, it is also a major choice for users that simply want to...

A week in security (October 9 - October 15)

Last week on Malwarebytes Labs: Explained: Quishing Update now! Atlassian Confluence vulnerability is being actively exploited Giant health insurer struck by ransomware didn't have antivirus protection Ransomware review: October 2023 Stalkerware activity drops as glaring spying problem is reveale...

Malicious code in xsolla-login-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b87428f045bf2e5db5eadeb9cb89e2b190e6c62c05e563676d28d6baaa91c631 The OpenSSF Package Analysis project identified 'xsolla-login-js-sdk' @ 4.0.0 npm as malicious. It is considered malicious because: - The packag...

MAL-2023-8379 Malicious code in xsolla-paystation-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 805042517f32c5bf86be354525e626c93152ff256ee91fc9cdf74042868bae95 The OpenSSF Package Analysis project identified 'xsolla-paystation-widget' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-8378 Malicious code in detoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b1f37400081aced14b9ba1ba6d0238fa2210207b1805b6befdd655632c1a65fd The OpenSSF Package Analysis project identified 'detoo' @ 4.0.0 npm as malicious. It is considered malicious because: - The package communicates...

CVE-2023-45270

creationtimestamp| type| source ---|---|--- 2023-10-13 20:29:09+00:00| seen| https://t.me/cibsecurity/72268...

Malicious code in tfb-cip-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 32e06870354259889acef36568293e07f1ada3677bafaba74764237fb6fef9d2 The OpenSSF Package Analysis project identified 'tfb-cip-app' @ 7.8.9 npm as malicious. It is considered malicious because: - The package...

Malicious Package

Overview Betalgo.Open.AI is a malicious package. This package contains malicious code that executes covert scripts upon installation or uninstallation, communicating with a remote server to download and execute additional malicious files, thereby deploying the SeroXen RAT on the victim's machine,...

Malicious Package

Overview ZendeskApi.Client.V2 is a malicious package. This package contains malicious code that executes covert scripts upon installation or uninstallation, communicating with a remote server to download and execute additional malicious files, thereby deploying the SeroXen RAT on the victim's...

Malicious Package

Overview Pathoschild.Stardew.Mod.Build.Config is a malicious package. This package contains malicious code that executes covert scripts upon installation or uninstallation, communicating with a remote server to download and execute additional malicious files, thereby deploying the SeroXen RAT on...

MAL-2023-8327 Malicious code in supabase.dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1e4679a0e55bb3adb8bc5aeca3ec47f21c782577c2dd593eaec5ea376d29977c The OpenSSF Package Analysis project identified 'supabase.dev' @ 4.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2023-42787

creationtimestamp| type| source ---|---|--- 2023-10-10 20:16:52+00:00| seen| https://t.me/cibsecurity/71971 2023-12-21 12:18:54+00:00| seen| https://t.me/ctinow/157640...

Malicious code in investing_parameters (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3fa4a6c4b0b94b2b009c0377390aeee029c2d9024af134c4697f3c8cdfb1f916 The OpenSSF Package Analysis project identified 'investingparameters' @ 1.2.1 rubygems as malicious. It is considered malicious because: - The...

MAL-2023-8322 Malicious code in investing_parameters (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3fa4a6c4b0b94b2b009c0377390aeee029c2d9024af134c4697f3c8cdfb1f916 The OpenSSF Package Analysis project identified 'investingparameters' @ 1.2.1 rubygems as malicious. It is considered malicious because: - The...

MAL-2023-8321 Malicious code in react-native-transcribe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bb4e6ce35475e387bd3dc85d83e20eeb1c4cd4ad8f4c8ccc7792928c87ddc18c The OpenSSF Package Analysis project identified 'react-native-transcribe' @ 1.3.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-8317 Malicious code in zf-apigility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76f7f25b98a2fb2e5c3d03a497a3732a067e5e1b6e7334a7aaf06310777b479e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cephlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f82a5ba62b790856947d686397170162bf743b168fd9d66008ed6501b465d5af The OpenSSF Package Analysis project identified 'cephlib' @ 0.0.2 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-8310 Malicious code in cephlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f82a5ba62b790856947d686397170162bf743b168fd9d66008ed6501b465d5af The OpenSSF Package Analysis project identified 'cephlib' @ 0.0.2 pypi as malicious. It is considered malicious because: - The package...

Malicious code in xmlbuilder3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c5ccc40a08ace658e1c2bb67a692e4a04f1c6c826a6cfbf7c2bec41d0f54c540 The OpenSSF Package Analysis project identified 'xmlbuilder3' @ 0.0.2 pypi as malicious. It is considered malicious because: - The package...