MAL-2023-8648 Malicious code in npm_package_devdependencies__types_jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5f8a28159fb1b2ef33b43e4aa71b0c85879d6220009091751cfa1590a1900329 The OpenSSF Package Analysis project identified 'npmpackagedevdependenciestypesjest' @ 30.5.0 npm as malicious. It is considered malicious...

iocs

It is an offensive tool for threat intelligence. The repository...

MAL-2023-8639 Malicious code in yetibarbar_plug (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4c26573e1e915f00ad980599539d1a9a04737c0264c7a7366cf0b7a88a92df08 The OpenSSF Package Analysis project identified 'yetibarbarplug' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

Eclipse IDE XXE in eclipse.platform

Impact xml files like ".project" are parsed vulnerable against all sorts of XXE attacks. The user just needs to open any evil project or update an open project with a vulnerable file for example for review a foreign repository or patch. Vulnerablility was found by static code analysis SonarLint...

Attackers are Working Around The Clock. Luckily, So Are We.

It takes an average of 204 days for organizations to discover a breach, and from there an average of 73 days to contain it. With the average cost of a breach at an all time high of $4.45 million IBM’s Cost of a Data Breach Report 2023, there’s an undeniable need for teams to enlist the right...

7 Uses for Generative AI to Enhance Security Operations

Welcome to a world where Generative AI revolutionizes the field of cybersecurity. Generative AI refers to the use of artificial intelligence AI techniques to generate or create new data, such as images, text, or sounds. It has gained significant attention in recent years due to its ability to...

The vulnerability relates to the AV1 parser for subtitle analysis, subparse, and the Gstreamer multimedia framework. This allows attackers to execute arbitrary code.

The vulnerability of the AV1 codec parser, subtitles analysis module, and subparse in the Gstreamer multimedia framework is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

How to identify VRID Conflicts.

Explain VRID conflicts and how to identify them...

MAL-2023-8636 Malicious code in @terraform-aws-github-runner/aws-ssm-uti (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9e8dee05678c6b03df102e495749bdc9db8ae73a32752a0f85345cc637577012 The OpenSSF Package Analysis project identified '@terraform-aws-github-runner/aws-ssm-uti' @ 1.999.0 npm as malicious. It is considered maliciou...

CVE-2023-5717

creationtimestamp| type| source ---|---|--- 2023-11-29 17:11:18+00:00| seen| https://t.me/arpsyndicate/775 2024-11-16 23:00:00+00:00| seen| https://u1f383.github.io/linux/2024/11/17/linux-kernel-perf-cve-2023-5717-quick-analysis.html 2024-11-30 15:50:41+00:00| published-proof-of-concept|...

Zero-Day Alert: Google Chrome Under Active Attack, Exploiting New Vulnerability

Google has rolled out security updates to fix seven security issues in its Chrome browser, including a zero-day that has come under active exploitation in the wild. Tracked as CVE-2023-6345, the high-severity vulnerability has been described as an integer overflow bug in Skia, an open source 2D...

Malicious code in topcoderhomepage_3.0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a918cae24042a2081d6c6149a7791e973357063dd7292f59ac3d9b32d9561974 The OpenSSF Package Analysis project identified 'topcoderhomepage3.0' @ 1.0.2 npm as malicious. It is considered malicious because: - The packag...

Secret White House Warrantless Surveillance Program

There seems to be no end to warrantless surveillance: According to the letter, a surveillance program now known as Data Analytical Services DAS has for more than a decade allowed federal, state, and local law enforcement agencies to mine the details of Americans’ calls, analyzing the phone record...

Closing the Visibility Gap: How Qualys Cloud Agent Passive Sensor (CAPS) Eliminates Blind Spots Without the Hassle

In modern networks, the most significant risks come from systems that fall through the cracks. Modern networks are full of unknown and unmanaged assets. Some are seemingly benign devices introduced by well-meaning employees or contractors that can turn rogue. While some of these may be genuinely...

Malicious code in oddsfire-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6560345fe7b94e452865d383a96b49b27e71c7113505ddfd5306218da9648d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8619 Malicious code in oddsfire-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6560345fe7b94e452865d383a96b49b27e71c7113505ddfd5306218da9648d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gog-module-event-bus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4fb2c212daa3b898b2df5ffdf458a7751515e92268bd6b3b13ac45894235be3c The OpenSSF Package Analysis project identified 'gog-module-event-bus' @ 1.0.1 npm as malicious. It is considered malicious because: - The packa...

MAL-2023-8607 Malicious code in configcat-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa83f7f79893be6fd5e1387e5464a8111c68512b8744756b77814e43a5679c8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Alert: New WailingCrab Malware Loader Spreading via Shipping-Themed Emails

Delivery- and shipping-themed email messages are being used to deliver a sophisticated malware loader known as WailingCrab. "The malware itself is split into multiple components, including a loader, injector, downloader and backdoor, and successful requests to C2-controlled servers are often...

GHSA-4JQ9-2XHW-JPX7

creationtimestamp| type| source ---|---|--- 2023-11-22 17:42:16+00:00| seen| https://t.me/arpsyndicate/362 2023-11-26 20:59:17+00:00| published-proof-of-concept| https://t.me/AnonGhostIndonesiaforum/128 2025-07-16 03:12:23+00:00| seen|...