MAL-2025-41273 Malicious code in parabol-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74ca7b873b936a65f847ef390b0cbe34ceb97ba32b0153888623b60c61f4b335 The OpenSSF Package Analysis project identified 'parabol-client' @ 9.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41272 Malicious code in tombac-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a3cbbd454182b1e77985f474c87e277b8b0e4efa49cc80edb90c60f7d3a12914 The OpenSSF Package Analysis project identified 'tombac-icons' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in tombac-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a3cbbd454182b1e77985f474c87e277b8b0e4efa49cc80edb90c60f7d3a12914 The OpenSSF Package Analysis project identified 'tombac-icons' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Towards Principled Analysis and Mitigation of Space Cyber Risks

Space infrastructures have become an underpinning of modern society, but their associated cyber risks are little understood. This Dissertation advances the state-of-the-art via four contributions. i It introduces an innovative framework for characterizing real-world cyber attacks against space...

MAL-2025-41270 Malicious code in react-markdown-v7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb4130aead07e462025fb467846b74aa4c38639038c68e74114f27e34ede57b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-41268 Malicious code in api-react125 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d2f6ad3f3d48477a940b0ade2ae623d9001486fb2dee5c4f448fa429a9165879 The OpenSSF Package Analysis project identified 'api-react125' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

MixGAN: a Hybrid Semi-Supervised and Generative Approach for DDoS Detection in Cloud-Integrated IoT Networks

The proliferation of cloud-integrated IoT systems has intensified exposure to Distributed Denial of Service DDoS attacks due to the expanded attack surface, heterogeneous device behaviors, and limited edge protection. However, DDoS detection in this context remains challenging because of complex...

MAL-2025-41262 Malicious code in fb_helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd02d94679b40d95c81b651a29666a45452deabc83d8e33032104032eef13261 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-41275 Malicious code in tanstack-virtual-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b38d98c47aceac75b944aff9d0df30a563d89aaa076329820aa58b119e010448 The OpenSSF Package Analysis project identified 'tanstack-virtual-cor...

Malicious code in sdp-transform-parser (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d6f0bf5deb53b6f1424914462ad86d16738a1118a744d709e3e37abaf8907134 The OpenSSF Package Analysis project identified 'sdp-transform-parser...

MAL-2025-41263 Malicious code in sdp-transform-parser (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d6f0bf5deb53b6f1424914462ad86d16738a1118a744d709e3e37abaf8907134 The OpenSSF Package Analysis project identified 'sdp-transform-parser...

Malicious code in @navancorp/ta-travel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 475cb3266e9f473c951bb35f87e31b76f08d312ee1916977eb7a125f339f7b7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-41261 Malicious code in chartsmaan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f8090d277adf0bf9266de2213bcb9d97270706324e2872a9c037e431f342fbc5 The OpenSSF Package Analysis project identified 'chartsmaan' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Security Bulletin: Vulnerabilities in Apache Ant and Apache Derby affect IBM Operations Analytics - Log Analysis (CVE-2019-11358, CVE-2020-23064, CVE-2020-11023, CVE-2020-11022)

Summary Cross-site scriptingXSS vulnerabilities in Apache Ant and Apache Derby affect IBM Operations Analytics - Log Analysis. It allows remote attackers to execute a script in a victim's Web browser. Vulnerability Details CVEID:CVE-2019-11358 DESCRIPTION: jQuery before 3.4.0, as used in Drupal,...

MAL-2025-41258 Malicious code in @bitkub-next-frontend-v2/app-bitkub-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c961401f308dd3c2e7d4639158b0b6c5cf92dbdfcafb06789988dc4824107960 The OpenSSF Package Analysis project identified '@bitkub-next-frontend-v2/app-bitkub-next' @ 1.13.0 npm as malicious. It is considered malicious...

FUJIFILM Healthcare Americas Synapse Mobility

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to access information beyond their assigned roles. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network...

MAL-2025-41259 Malicious code in amp-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dacbeb50af065a576ade73d084e6ac504cb061d33ebdb8fe8d72839b926e9d59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Connected and Exposed: Cybersecurity Risks, Regulatory Gaps, and Public Perception in Internet-Connected Vehicles

The rapid advancement of Internet-connected vehicle technologies has introduced a new era of smart mobility, while simultaneously raising significant cybersecurity and privacy concerns. This paper explores the evolving threat landscape associated with connected vehicles, focusing on risks such as...

MAL-2025-41256 Malicious code in other-external (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f4043d62490dcece68def76c783cdadf630e5b72829cffa35283867dfd60ff62 The OpenSSF Package Analysis project identified 'other-external' @ 20.1.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in ai-agent-email (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 81c9d8af77a711b63ca783f6e56fa2838866df6eb7feee32485fa94cb387c202 The OpenSSF Package Analysis project identified 'ai-agent-email' @ 9.0.1 npm as malicious. It is considered malicious because: - The package...