Malicious code in expertsvc-onboard-offboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6d7a1267ed4ecc6a46b548be6778e2f198c0ec5629953d3e9e6a79e1f213df The package expertsvc-onboard-offboard was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190585 Malicious code in expertsvc-onboard-offboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6d7a1267ed4ecc6a46b548be6778e2f198c0ec5629953d3e9e6a79e1f213df The package expertsvc-onboard-offboard was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190586 Malicious code in identity-authn-core-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db734e79e178dd70b53bb814581620da1604a06da4967555160d7dfd0d14e0c5 The package identity-authn-core-ui was found to contain malicious code. Source: ossf-package-analysis...

OSV-SCALIBR 安全漏洞

OSV-SCALIBR is an open source software portfolio analysis library from Google. A security vulnerability exists in OSV-SCALIBR that stems from a file system traversal path error that could cause an application to crash...

RampoNN: A Reachability-Guided System Falsification for Efficient Cyber-Kinetic Vulnerability Detection

Detecting kinetic vulnerabilities in Cyber-Physical Systems CPS, vulnerabilities in control code that can precipitate hazardous physical consequences, is a critical challenge. This task is complicated by the need to analyze the intricate coupling between complex software behavior and the system's...

Mac users warned about new DigitStealer information stealer

A new infostealer called DigitStealer is going after Mac users. It avoids detection, skips older devices, and steals files, passwords, and browser data. We break down what it does and how to protect your Mac. Researchers have described a new malware called DigitStealer that steals sensitive...

CISA Releases Guide to Mitigate Risks from Bulletproof Hosting Providers

Today, Cybersecurity and Infrastructure Security Agency CISA, in collaboration with the U.S. National Security Agency, U.S. Department of Defense Cyber Crime Center, U.S. Federal Bureau of Investigation, and international partners, released the guide Bulletproof Defense: Mitigating Risks from...

Malicious code in alicenpmpackage13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4183158dd9ab68784bc126821795cf166b7f2c828d67f46efc533d3859a4342 The package alicenpmpackage13 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in kc-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32088d023faff39ca532f60b6fefa143e98da4ff439ecf1d9922cbb7f5f669ef The package kc-next was found to contain malicious code. Source: ghsa-malware 750f8ce90382db0d1c42cc21bef3cce0f5220048311c62bff8fb2928e2b936c6 Any...

MAL-2025-190574 Malicious code in kc-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32088d023faff39ca532f60b6fefa143e98da4ff439ecf1d9922cbb7f5f669ef The package kc-next was found to contain malicious code. Source: ghsa-malware 750f8ce90382db0d1c42cc21bef3cce0f5220048311c62bff8fb2928e2b936c6 Any...

Malicious code in gbiz-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553cbc6a459ec9d1b6f955fcef3ae6eb80c745689510710611df3d9d6527c2fd The package gbiz-next was found to contain malicious code. Source: ghsa-malware c8391a7e1c2a64a130ced055b9f21e596e7bde4ba799add2094c42c4bf63613b Any...

MAL-2025-190573 Malicious code in gbiz-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553cbc6a459ec9d1b6f955fcef3ae6eb80c745689510710611df3d9d6527c2fd The package gbiz-next was found to contain malicious code. Source: ghsa-malware c8391a7e1c2a64a130ced055b9f21e596e7bde4ba799add2094c42c4bf63613b Any...

Seven npm Packages Use Adspect Cloaking to Trick Victims Into Crypto Scam Pages

Cybersecurity researchers have discovered a set of seven npm packages published by a single threat actor that leverages a cloaking service called Adspect to differentiate between real victims and security researchers to ultimately redirect them to sketchy crypto-themed sites. The malicious npm...

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

🔥 Log4Shell CVE-2021-44228 Analysis !License: MIThttps:...

Towards Classifying Benign and Malicious Packages Using Machine Learning

Recently, the number of malicious open-source packages in package repositories has been increasing dramatically. While major security scanners focus on identifying known Common Vulnerabilities and Exposures CVEs in open-source packages, there are very few studies on detecting malicious packages...

Malicious code in node-calculator-9c62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b03397fc5fdb1c7413b6d71169bf8e3621ee9c1b0a1e0a71a875d6ec098cd5b The package node-calculator-9c62 was found to contain malicious code...

MAL-2025-190524 Malicious code in node-calculator-8ddb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93cecdcd0f2d763dafb0dadb9723d844fe53a10c842578f1ffb0c768d86f9da5 The package node-calculator-8ddb was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190521 Malicious code in node-calculator-7bea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ddbd5a2cd94466471bef272010b7911c371022bffeeee5ec50e01a0affde411 The package node-calculator-7bea was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in node-calculator-ac24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8918452cf7ce73c18c2a4f90264358ac5db009921c8418680cac74f0ff9a04 The package node-calculator-ac24 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in node-calculator-c213 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea9aa404312edd44fdddfae5d4815b452d286fd3a0510ccdfd8f9f03a61c007c The package node-calculator-c213 was found to contain malicious code. Source: ossf-package-analysis...