Malicious code in tannucolingboys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis be8167659390a471b016dfb0b25a778b2a77374ac31f845966ea70ce799ca081 The OpenSSF Package Analysis project identified 'tannucolingboys' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8932 Malicious code in @the-c-company/common-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e18cae6ce0c3de2fe7988c316471f5383433deaa0e8b9bf0376b69b634188218 The OpenSSF Package Analysis project identified '@the-c-company/common-utils' @ 1.0.0 npm as malicious. It is considered malicious because: - Th...

Malicious code in linear-airbyte-source (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f2f93219b987eadd13a3db8af0914e4ccc9ea3d3fbf6f571e156e5e5861d25c6 The OpenSSF Package Analysis project identified 'linear-airbyte-source' @ 9.9.10 npm as malicious. It is considered malicious because: - The...

MAL-2024-8928 Malicious code in learning_npm1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f3b173b32e267c6a9b7455320bda81f08ce154ad6315aeaea540133a9f0ab232 The OpenSSF Package Analysis project identified 'learningnpm1' @ 100.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8924 Malicious code in randompackage-notreal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f9c2160c65a4352d89013d032c20e0f4cf59a5f34ca2f96baf3aeeca5858a7b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8922 Malicious code in vehicle-optionalproducts-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 52513e322c63383065f4e0e5b8b22dbb1452248d372c74fd463402c7179e5abb The OpenSSF Package Analysis project identified 'vehicle-optionalproducts-ui' @ 99.0.0 npm as malicious. It is considered malicious because: - T...

Malicious code in @energysolutions/mylib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 08f12d3c3e2e99f5bcec121d93fe4ece6a29ff57478e2e93e0cff0d4309832ac The OpenSSF Package Analysis project identified '@energysolutions/mylib' @ 999999999.999999.999999 npm as malicious. It is considered malicious...

CVE-2024-42351

Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. An attacker can potentially replace the contents of public datasets resulting in data loss or tampering. All supported branches of Galaxy and...

CVE-2024-42351

CVE-2024-42351 affects the Galaxy open‑source data analysis platform, where an attacker can potentially replace contents of public datasets, causing data loss or tampering. Affected versions are Galaxy releases prior to 21.05; patches have been applied in all supported branches back to release_21...

CVE-2024-42346 Stored Cross Site Scripting (Stored XSS) in Galaxy

Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. The editor visualization, /visualizations endpoint, can be used to store HTML tags and trigger javascript execution upon edit operation. All...

File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add

file-unpumper is a powerful command-line utility designed to clean and analyze Portable Executable PE files. It provides a range of features to help developers and security professionals work with PE files more effectively. Features PE Header Fixing : file-unpumper can fix and align the PE header...

Malicious code in npm-evil-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b5422630a80e283b7ae938687b04a988bee70b5c8b137520d4aaca5af1b979c3 The OpenSSF Package Analysis project identified 'npm-evil-fish' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Tor anonymity compromised by law enforcement. Is it still safe to use?

Despite people generally considering the Tor network as an essential tool for anonymous browsing, german law enforcement agencies have managed to de-anonymize Tor users after putting surveillance on Tor servers for months. Before we go into the what the agencies did, let's take a look at some...

This Windows PowerShell Phish Has Scary Potential

ManyGitHub users this week received a novel phishing email warning of critical security holes in their code. Those who clicked the link for details were asked to distinguish themselves from bots by pressing a combination of keyboard keys that causes Microsoft Windows to download password-stealing...

MAL-2024-8912 Malicious code in infosnap-secure-family-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e26fd78e593cb831595d3ef036383a3570e155771197138cd43afac672bfe304 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8941 Malicious code in confidential-package-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 22b6e399f6684509440f29b16a20c593cc1aee7a15e87f5263dfe847b6d7850a The OpenSSF Package Analysis project identified 'confidential-package-name' @ 99.9.9 npm as malicious. It is considered malicious because: - The...

MAL-2024-8911 Malicious code in dc-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5534b8254822e7e5f6e4ee2e6f748422783f8a2aebac5f16fca13c06af524468 The OpenSSF Package Analysis project identified 'dc-testing' @ 99.9.9 npm as malicious. It is considered malicious because: - The package...

Kastle Systems Access Control System

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.2 ATTENTION : Exploitable remotely/low attack complexity Vendor : Kastle Systems Equipment : Access Control System Vulnerabilities : Use of Hard-coded Credentials, Cleartext Storage of Sensitive Information 2. RISK EVALUATION Successful exploitation of...

Malicious code in bsc-stdlib-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis df99335a79394c76ec65c4c11bd937510961ba93b67e631d560753ab61a735b6 The OpenSSF Package Analysis project identified 'bsc-stdlib-polyfill' @ 0.0.1 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-8900 Malicious code in bsc-stdlib-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis df99335a79394c76ec65c4c11bd937510961ba93b67e631d560753ab61a735b6 The OpenSSF Package Analysis project identified 'bsc-stdlib-polyfill' @ 0.0.1 npm as malicious. It is considered malicious because: - The packag...