Malicious code in ambmock.sol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a3325e3e3e4d5da75f9755d2ad28d8e50b9339069afd9e0ed75cfcee080e3eed The OpenSSF Package Analysis project identified 'ambmock.sol' @ 1337.0.0 npm as malicious. It is considered malicious because: - The package...

Detecting Stealthy Data Poisoning Attacks in AI Code Generators

Deep learning DL models for natural language-to-code generation have become integral to modern software development pipelines. However, their heavy reliance on large amounts of data, often collected from unsanitized online sources, exposes them to data poisoning attacks, where adversaries inject...

Malicious code in azure-ipam-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 44b5c0e4141f25b2fb25c0fcd206aa203961a4a13336461bab2825b51576f88d The OpenSSF Package Analysis project identified 'azure-ipam-ui' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

The WASM Cloak: Evaluating Browser Fingerprinting Defenses under WebAssembly Based Obfuscation

Browser fingerprinting defenses have historically focused on detecting JavaScriptJS-based tracking techniques. However, the widespread adoption of WebAssembly WASM introduces a potential blind spot, as adversaries can convert JS to WASM's low-level binary format to obfuscate malicious logic. This...

Malicious code in @flight-common/services (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9f79d53932b1163ec8f1f13fbb18de9439278bcf7ee1fe90dcd53d0349d24b72 The OpenSSF Package Analysis project identified '@flight-common/services' @ 1.2.9213 npm as malicious. It is considered malicious because: - The...

Malicious code in @liquid-web/core-services (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f9afbcbd82f8b0c7374b5e9edb81329aa506296ef39a5a63d70d59af7591e74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @flight-common/models (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c5af2423bce8f82ab3bebfecba472bdcc04805388481ec19e96c245ca48ccd3b The OpenSSF Package Analysis project identified '@flight-common/models' @ 1.2.9213 npm as malicious. It is considered malicious because: - The...

MAL-2025-42122 Malicious code in @flight-common/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 10b5cb816f030297707c6e9ae79f7916de698fd58c8b068b18ef716c7425240b The OpenSSF Package Analysis project identified '@flight-common/components' @ 1.2.9213 npm as malicious. It is considered malicious because: - T...

Faraday 5.16.0

Faraday is a tool that introduces a new concept called IPE, or Integrated Penetration-Test Environment. It is a multiuser penetration test IDE designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use...

Linux Distros Unpatched Vulnerability : CVE-2022-3767

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless ...

Linux Distros Unpatched Vulnerability : CVE-2022-28070

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A null pointer deference in coreanalfcn function in radare2 5.4.2 and 5.4.0. CVE-2022-28070 Note that Nessus relies on the presence of the package as reported b...

Zeek 8.0.1

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek ha...

Malicious code in uitk_i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fc864b28374d03fb38eaeac8bc4b8479334114789acb4be7c5f43a9a738d990c The OpenSSF Package Analysis project identified 'uitki18n' @ 99.99.1 npm as malicious. It is considered malicious because: - The package execute...

MAL-2025-41434 Malicious code in uitk_i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fc864b28374d03fb38eaeac8bc4b8479334114789acb4be7c5f43a9a738d990c The OpenSSF Package Analysis project identified 'uitki18n' @ 99.99.1 npm as malicious. It is considered malicious because: - The package execute...

Malicious Package

Overview time-server-analysis is a malicious package. This package contains malicious code intended to exfiltrate data, and its contents have been removed from the official package manager. Although it appears to be a time-related utility, its main function is to collect system information and se...

INVT VT-Designer and HMITool

RISK EVALUATION Successful exploitation of these vulnerabilities could allow attackers to execute arbitrary code in the context of the current process. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:...

SIExVulTS: Sensitive Information Exposure Vulnerability Detection System Using Transformer Models and Static Analysis

Sensitive Information Exposure SIEx vulnerabilities CWE-200 remain a persistent and under-addressed threat across software systems, often leading to serious security breaches. Existing detection tools rarely target the diverse subcategories of CWE-200 or provide context-aware analysis of code-lev...

PT-2026-33168

Name of the Vulnerable Software and Affected Versions AMD Platform Configuration Blob APCB SMM driver affected versions not specified Description Incorrect use of boot service in the AMD Platform Configuration Blob APCB SMM driver could allow a privileged attacker with local access Ring 0 to...

Aligning Core Aspects: Improving Vulnerability Proof-Of-Concepts Via Cross-Source Insights

For vulnerabilities, Proof-of-Concept PoC plays an irreplaceable role in demonstrating the exploitability. PoC reports may include critical information such as specific usage, test platforms, and more, providing essential insights for researchers. However, in reality, due to various PoC templates...

Collaborative Intelligence: Topic Modelling of Large Language Model Use in Live Cybersecurity Operations

Objective: This work describes the topic modelling of Security Operations Centre SOC use of a large language model LLM, during live security operations. The goal is to better understand how these specialists voluntarily use this tool. Background: Human-automation teams have been extensively...