Malicious code in cfa-react-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aac7ddc598f480a5c87bd28d65a6fc762b5c9ce46b72934eabe3760b49f11a36 The OpenSSF Package Analysis project identified 'cfa-react-components' @ 2.8.8 npm as malicious. It is considered malicious because: - The packa...

Malicious code in malwaretesting1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dfabd3ff2ac6ca412b085988e3c2afdc4d44178dba2cfa134d851c159ccb7f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2445 Malicious code in malwaretesting1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dfabd3ff2ac6ca412b085988e3c2afdc4d44178dba2cfa134d851c159ccb7f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in malwaretesting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 08fe9939d1c2c8ae0ac8bf48c1a2f4e5fc02623d8012c4c6bbbb308f4d6f4200 The OpenSSF Package Analysis project identified 'malwaretesting' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in actions-project-version-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dfacd7dc56f2f0ae2b911d6bd9b2b8d50e4273f1f28a014bf64dfa9fdb9ff3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SimpleHelp Detected

This is an informational notice that the scanner was able to detect a SimpleHelp instance on the target server. Note that this detection is included in the Remote Access Tools category. No source data...

The vulnerability of the ftruncate() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ftruncate function in the Linux operating system’s kernel is related to errors in the processing of input data during syntax analysis of code. Exploiting this vulnerability can allow an attacker to cause a service failure...

Malicious code in cb4good (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c16e1ebf21c15491517654d93507f4ac7ca8aa96e47403f10fd753ef7bcbca95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2232 Malicious code in cb4good (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c16e1ebf21c15491517654d93507f4ac7ca8aa96e47403f10fd753ef7bcbca95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-24067

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-19 02:49:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8017 2025-04-01 01:31:45+00:00| seen|...

New XCSSET malware adds new obfuscation, persistence techniques to infect Xcode projects

Microsoft Threat Intelligence has uncovered a new variant of XCSSET, a sophisticated modular macOS malware that infects Xcode projects, in the wild during routine threat hunting. Its first known variant since 2022, this latest XCSSET malware features enhanced obfuscation methods, updated...

MAL-2025-2231 Malicious code in @partner-tech/pax-illustrations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 59fd97ac6b88180973bc6765a95cc0730d5de2879c68c3d7d29dda4531b7fbec The OpenSSF Package Analysis project identified '@partner-tech/pax-illustrations' @ 99.99.106 npm as malicious. It is considered malicious...

Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool (Update A)

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication, gain control over the products, or impersonate the web applications. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of...

TSPlus Detected

This is an informational notice that the scanner was able to detect TSPlus on the target server. Note that this detection is included in the Remote Access Tools category. No source data...

MAL-2025-2226 Malicious code in atlas-user-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7efee27a6c041d66384de635910c04fe43fa2c193ad0a47efb69acb84fb16ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

[SECURITY] Fedora 42 Update: rizin-0.7.4-8.fc42

Rizin is a free and open-source Reverse Engineering framework, providing a complete binary analysis experience with features like Disassembler, Hexadecimal editor, Emulation, Binary inspection, Debugger, and more. Rizin is a fork of radare2 with a focus on usability, working features and co de...

MAL-2025-2224 Malicious code in atlas-websocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8650c05b42abfbb5a69f65d884b445fcd038d3c56563d3ce5341af221bf80db4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2228 Malicious code in prblingd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7886e2696ffc6e35d7a80ad30ee51258e49c741e17d02b5d6c83d370fe5165a8 The OpenSSF Package Analysis project identified 'prblingd' @ 1.0.3 npm as malicious. It is considered malicious because: - The package executes...

MAL-2025-2223 Malicious code in patternfly-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 057836fcde782f283efd1e52688d31d8375cd7d963b136908d1457ea24e64193 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-11638

CVE-2024-11638 affects the WordPress plugin Gtbabel (versions before 6.6.9). Root cause: it does not verify that the URL to analyze is within the blog, enabling unauthenticated attackers to trigger requests that can capture a logged-in user’s cookies (e.g., admin). Impact: potential admin cookie ...