13247 matches found
MAL-2025-4044 Malicious code in ort-web-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3e179ffca16c7ee28162f57656f14612c34005f447e5f557edc742a4dd9120e6 The OpenSSF Package Analysis project identified 'ort-web-template' @ 100.100.1337 npm as malicious. It is considered malicious because: - The...
Malicious code in ort-web-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3e179ffca16c7ee28162f57656f14612c34005f447e5f557edc742a4dd9120e6 The OpenSSF Package Analysis project identified 'ort-web-template' @ 100.100.1337 npm as malicious. It is considered malicious because: - The...
Malicious code in service-catalog-copilot (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 89c9b90298ed452d812eb4374f8dc339318c0a084a64157722e7b733416fa131 The OpenSSF Package Analysis project identified 'service-catalog-copilot' @ 100.11.1337 npm as malicious. It is considered malicious because: -...
MAL-2025-4045 Malicious code in service-catalog-copilot (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 89c9b90298ed452d812eb4374f8dc339318c0a084a64157722e7b733416fa131 The OpenSSF Package Analysis project identified 'service-catalog-copilot' @ 100.11.1337 npm as malicious. It is considered malicious because: -...
MAL-2025-4041 Malicious code in @abb-ux/commonux-web-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f22e30f31c7ac7adf96fb88b6ec251f1263a643a038b0fcba1db4b8ada61cb1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4046 Malicious code in trusted-firmware-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3a6dc31ad91aec1f31822d8aced35d9645371c5e0194f3a4b7627a6753955769 The OpenSSF Package Analysis project identified 'trusted-firmware-a' @ 100.11.1337 npm as malicious. It is considered malicious because: - The...
MAL-2025-4047 Malicious code in wallet1-options (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 152e4326d8826107e6c4706758de644f8ac9a9785cd68f6f655461fd59016682 The OpenSSF Package Analysis project identified 'wallet1-options' @ 100.0.4 npm as malicious. It is considered malicious because: - The package...
MAL-2025-4043 Malicious code in fireblocks-netlink-v2-api-validator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ef9984660d27e961e84209123eecd25e75b39ff6c769c35e6c5a50c5a1781b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
An Automated Blackbox Noncompliance Checker for QUIC Server Implementations
We develop QUICtester, an automated approach for uncovering non-compliant behaviors in the ratified QUIC protocol implementations RFC 9000/9001. QUICtester leverages active automata learning to abstract the behavior of a QUIC implementation into a finite state machine FSM representation. Unlike...
Optimal Client Sampling in Federated Learning with Client-Level Heterogeneous Differential Privacy
Federated Learning with client-level differential privacy DP provides a promising framework for collaboratively training models while rigorously protecting clients' privacy. However, classic approaches like DP-FedAvg struggle when clients have heterogeneous privacy requirements, as they must...
A Systematic Review and Taxonomy for Privacy Breach Classification: Trends, Gaps, and Future Directions
In response to the rising frequency and complexity of data breaches and evolving global privacy regulations, this study presents a comprehensive examination of academic literature on the classification of privacy breaches and violations between 2010-2024. Through a systematic literature review, a...
QUT-DV25: a Dataset for Dynamic Analysis of Next-Gen Software Supply Chain Attacks
Securing software supply chains is a growing challenge due to the inadequacy of existing datasets in capturing the complexity of next-gen attacks, such as multiphase malware execution, remote access activation, and dynamic payload generation. Existing datasets, which rely on metadata inspection a...
Malicious code in examples-formic (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 074e879e97761583a22531a3d4f917977ac387e40c36bc5eb35e3f4b367db196 The OpenSSF Package Analysis project identified 'examples-formic' @ 100.0.2 npm as malicious. It is considered malicious because: - The package...
MAL-2025-3951 Malicious code in examples-formic (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 074e879e97761583a22531a3d4f917977ac387e40c36bc5eb35e3f4b367db196 The OpenSSF Package Analysis project identified 'examples-formic' @ 100.0.2 npm as malicious. It is considered malicious because: - The package...
Iβm done preparing the slides for my talk about Vulristics at PHDays
I 'm done preparing the slides for my talk about Vulristics at PHDays. I'll be speaking on the last day of the festival - Saturday, May 24, at 16:00 in Popov Hall 25. If you're there at that time, I'd be glad to see you. If not - join online! I'll have an hour to dive into Vulristics, vulnerabili...
MAL-2025-3957 Malicious code in vscode-oja (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 222332856f685e334465b24346da36177ea57028e903aaf5c7b6fc845f1e601a The OpenSSF Package Analysis project identified 'vscode-oja' @ 100.0.2 npm as malicious. It is considered malicious because: - The package...
MAL-2025-3949 Malicious code in evo-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1963187cd4dc65fd86ae4bdae898bd2fea39e8e6a8464b3b00e2a83f5dcbb95b The OpenSSF Package Analysis project identified 'evo-web' @ 100.0.2 npm as malicious. It is considered malicious because: - The package executes...
An In-Kernel Forensics Engine for Investigating Evasive Attacks
Over the years, adversarial attempts against critical services have become more effective and sophisticated in launching low-profile attacks. This trend has always been concerning. However, an even more alarming trend is the increasing difficulty of collecting relevant evidence about these attack...
Malicious code in reload-nucleus-views-on-compile (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9b7dc180514fc1e38349d2d05cf314d0a6cd4de47cb4a7bd092edc29f24982b6 The OpenSSF Package Analysis project identified 'reload-nucleus-views-on-compile' @ 10.10.10 npm as malicious. It is considered malicious becaus...
MAL-2025-3929 Malicious code in apilogicserver (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8beaeb43103672154062bf9b44734e305dad9ba1e9bbc6453d539cefa3e29f62 The OpenSSF Package Analysis project identified 'apilogicserver' @ 14.5.0 pypi as malicious. It is considered malicious because: - The package...