Malicious code in noblox.js-servers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis be4b415c87e9f3008a2d199fcc914e49a3a8a047e4bdfcaa493a9364d54accf7 The OpenSSF Package Analysis project identified 'noblox.js-servers' @ 4.15.8 npm as malicious. It is considered malicious because: - The package...

Malicious code in error-can-not-resolve-resource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f44848c297338de1e97a9c4d961ba8f2441f2464713bd36229bf5c0fb7509455 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bakery-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a8e5bc15b6be0a7b0cb44ca4ad86f63a0b563af9160ffe245052f833f3e02ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cloudflare-docs-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bbb41f9171f3ad4b1423390d2a5288a5da4ee679c8757975bc22b33c93e63ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-36 Malicious code in @monokera/react-components-storybook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdf75e7663fbdb265190a8a2b33f0e6feb6e3d3cea6da8c936226cbe4c95f95c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Signal, AI Generated Art Least, Amazon, Facebook Most Invasive Apps, Study

By Waqas In-depth analysis reveals concerning patterns in user data collection, with shopping and food delivery apps at the forefront. This is a post from HackRead.com Read the original post: Signal, AI Generated Art Least, Amazon, Facebook Most Invasive Apps, Study...

CVE-2023-6932

creationtimestamp| type| source ---|---|--- 2024-01-04 07:51:57+00:00| seen| https://t.me/ctinow/162812 2024-01-12 16:11:20+00:00| seen| https://t.me/ctinow/167349 2025-01-07 23:00:00+00:00| seen| https://u1f383.github.io/linux/2025/01/08/two-network-related-vulnerabilities-analysis.html 2025-01-...

CVE-2023-6931

creationtimestamp| type| source ---|---|--- 2024-01-04 07:51:57+00:00| seen| https://t.me/ctinow/162813 2024-11-13 23:00:00+00:00| seen| https://u1f383.github.io/linux/2024/11/14/linux-kernel-perf-cve-2023-6931-analysis.html 2025-01-19 21:02:05+00:00| seen|...

Malicious code in axelhowe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9a6b8a2beae8966a71fb077b1adaef5f5a2fdd01e92c2bdfed182d06a8745435 The OpenSSF Package Analysis project identified 'axelhowe' @ 0.0.0-5VtLmtixx6V5PkcW npm as malicious. It is considered malicious because: - The...

CVE-2024-21623

OTCLient (the Tibia OT server client) is affected by an expression injection in the GitHub Actions workflow for /mehah/otclient, specifically the Analyses - SonarCloud workflow. The vulnerability enables remote command execution, secret leakage, and repository alteration on the vulnerable runner....

TikTok Editorial Analysis

TikTok seems to be skewing things in the interests of the Chinese Communist Party. This is a serious analysis, and the methodology looks sound. Conclusion: Substantial Differences in Hashtag Ratios Raise Concerns about TikToks Impartiality Given the research above, we assess a strong possibility...

Mobile malware analysis for the BBC

This is a version of our report referenced in the Helping a mobile malware fraud victim blog post, with all sensitive information removed. Summary One malicious application was identified on the device, and evidence identified during the examination strong suggests though this cannot be confirmed...

Malicious code in @skip-js/cookie-consent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5576fae3b0649b388c1eb920f54ed752672ecdd3558a0988c30504346de5f0c2 The OpenSSF Package Analysis project identified '@skip-js/cookie-consent' @ 0.8.0 npm as malicious. It is considered malicious because: - The...

The Anatomy of HTML Attachment Phishing

The Anatomy of HTML Attachment Phishing: One Code, Many Variants By Mathanraj Thangaraju, Niranjan Hegde, and Sijo Jacob · June 14, 2023 Introduction Phishing is the malevolent practise of pretending to be a reliable entity in electronic communication to steal sensitive data, such as login...

MAL-2024-5 Malicious code in @cartus-core/cartus-common-ui2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dda6d81204f2c556310cb11a7875e4f74aff47c159c093a77d424c32911db2e6 The OpenSSF Package Analysis project identified '@cartus-core/cartus-common-ui2' @ 11230000951.0.6 npm as malicious. It is considered malicious...

Malicious code in squaredev-next-online-payments-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c12aadbc7b6d08bd4746e705c7507074eb759ac60f260bdf9a59cd85d966a45b The OpenSSF Package Analysis project identified 'squaredev-next-online-payments-example' @ 99.0.0 npm as malicious. It is considered malicious...

CVE-2022-46487

Improper initialization of x87 and SSE floating-point configuration registers in the sconeentry component of SCONE before 5.8.0 for Intel SGX allows a local attacker to compromise the execution integrity of floating-point operations in an enclave or access sensitive information via side-channel...

Input validation

Improper initialization of x87 and SSE floating-point configuration registers in the sconeentry component of SCONE before 5.8.0 for Intel SGX allows a local attacker to compromise the execution integrity of floating-point operations in an enclave or access sensitive information via side-channel...

CVE-2022-46487

Improper initialization of x87 and SSE floating-point configuration registers in the sconeentry component of SCONE before 5.8.0 for Intel SGX allows a local attacker to compromise the execution integrity of floating-point operations in an enclave or access sensitive information via side-channel...

CVE-2022-46487

Improper initialization of x87 and SSE floating-point configuration registers in the sconeentry component of SCONE before 5.8.0 for Intel SGX allows a local attacker to compromise the execution integrity of floating-point operations in an enclave or access sensitive information via side-channel...