MAL-2025-41256 Malicious code in other-external (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f4043d62490dcece68def76c783cdadf630e5b72829cffa35283867dfd60ff62 The OpenSSF Package Analysis project identified 'other-external' @ 20.1.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in ai-agent-email (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 81c9d8af77a711b63ca783f6e56fa2838866df6eb7feee32485fa94cb387c202 The OpenSSF Package Analysis project identified 'ai-agent-email' @ 9.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in @navify-platform/error (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5b9e6a4a6b1cd28b115da5f53a42db16b7446f89c67032f0e75b747da1b3ef5c The OpenSSF Package Analysis project identified '@navify-platform/error' @ 1.2.0 npm as malicious. It is considered malicious because: - The...

Malicious code in @navify-platform/i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 306d60012db44c48b4e577372019b8171e2eb15c6cfb80a9c1e5eb7df32149de The OpenSSF Package Analysis project identified '@navify-platform/i18n' @ 1.2.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-41250 Malicious code in @navify-platform/i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 306d60012db44c48b4e577372019b8171e2eb15c6cfb80a9c1e5eb7df32149de The OpenSSF Package Analysis project identified '@navify-platform/i18n' @ 1.2.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-41252 Malicious code in @navify-platform/url (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aa4184dfcef3ef233797dc945800c262566392179ef6a2cadc4ae4eba11cddf0 The OpenSSF Package Analysis project identified '@navify-platform/url' @ 1.3.0 npm as malicious. It is considered malicious because: - The packa...

From Impact to Action: Turning BIA Insights Into Resilient Recovery

Modern businesses face a rapidly evolving and expanding threat landscape, but what does this mean for your business? It means a growing number of risks, along with an increase in their frequency, variety, complexity, severity, and potential business impact. The real question is, "How do you tackl...

A Guide to Stakeholder Analysis for Cybersecurity Researchers

Stakeholder-based ethics analysis is now a formal requirement for submissions to top cybersecurity research venues. This requirement reflects a growing consensus that cybersecurity researchers must go beyond providing capabilities to anticipating and mitigating the potential harms thereof. Howeve...

MoEcho: Exploiting Side-Channel Attacks to Compromise User Privacy in Mixture-Of-Experts LLMs

The transformer architecture has become a cornerstone of modern AI, fueling remarkable progress across applications in natural language processing, computer vision, and multimodal learning. As these models continue to scale explosively for performance, implementation efficiency remains a critical...

Markov Chain-Based Model of Blockchain Radio Access Networks

Security has always been a priority, for researchers, service providers and network operators when it comes to radio access networks RAN. One wireless access approach that has captured attention is blockchain enabled RAN B-RAN due to its secure nature. This research introduces a framework that...

MAL-2025-41246 Malicious code in solana-fb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0839c4c8b190db2ec7281e182850ddeb8cf94eec0450921f406255674f1c2470 The OpenSSF Package Analysis project identified 'solana-fb' @ 1.2.2 npm as malicious. It is considered malicious because: - The package executes...

MAL-2025-41249 Malicious code in mv-hosp (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4952f8c63bd825b267e27af4ca78405659c40fa6b10ed3687573b348a92c690a Any computer that has this package installed or running should be considered...

Linux Distros Unpatched Vulnerability : CVE-2017-5121

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate use of JIT optimisation in V8 in Google Chrome prior to 61.0.3163.100 for Linux, Windows, and Mac allowed a remote attacker to execute arbitrary...

Webmin 1.920 Remote Code Execution

This tool is designed to exploit vulnerabilities in Webmin versions 1.890, 1.900, 1.910, and 1.920. It sends a crafted HTTP request to initiate a reverse shell on a vulnerable Webmin server...

PT-2025-33805 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue where the BPF JSET conditional jump is not correctly handled during control flow graph CFG computation. This can lead to incorrect live register and...

MAL-2025-6973 Malicious code in flatfox-api-python (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a81db9eb6d8c8eb51eecf49610e1282097b77630ccb58b6eef3e2f002e5fe0e2 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in swiv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 945d4a5f54e77ae66588b5b64aa30eb2627903bffcb72a3031b9c4b6b2122b43 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Beneath the Mask: Can Contribution Data Unveil Malicious Personas in Open-Source Projects?

In February 2024, after building trust over two years with project maintainers by making a significant volume of legitimate contributions, GitHub user "JiaT75" self-merged a version of the XZ Utils project containing a highly sophisticated, well-disguised backdoor targeting sshd processes running...

MAL-2025-6895 Malicious code in commonweb-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c019e3086bf1cec9b859c8fe048187fc7cf6dc866de93fbd0ff2182b3e4fc0a The OpenSSF Package Analysis project identified 'commonweb-setup' @ 10.11.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6947 Malicious code in personalizationtrkserv (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e171fa4d76ea31b32b21ec8efae81c75a65d7adcc42a621c06cfd5406110131 The OpenSSF Package Analysis project identified...