MAL-2023-7992 Malicious code in pingserver-test.01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d1b45d47d16b0b11b03d83b5b03c34f73980a4e584b35227fbb1359f69c1bbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7979 Malicious code in visual_components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7289e2b3846c5d4eacbe709a4bd08a2e48688e587b810b9535c2275275dd2497 The OpenSSF Package Analysis project identified 'visualcomponents' @ 1.0.13 npm as malicious. It is considered malicious because: - The package...

Malicious code in visual_components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7289e2b3846c5d4eacbe709a4bd08a2e48688e587b810b9535c2275275dd2497 The OpenSSF Package Analysis project identified 'visualcomponents' @ 1.0.13 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8051 Malicious code in jupiter-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a995253a2ee90fffb109184b329a5e1966f4e8b6cd8a67c131c60324495d8127 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8046 Malicious code in fiji-core-cryptopool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36abda3aa4cfb7fec2c60325ef82189f43f96a97e841253b1f71356f239b99d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Revisiting 16shop Phishing Kit, Trend-Interpol Partnership

In this entry, we summarize the security analyses and investigations done on phishing-as-a-service 16shop through the years. We also outline the partnership between Trend Micro and Interpol in taking down the main administrators and servers of this massive phishing campaign...

MAL-2023-7961 Malicious code in web3-provider-patchers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3da847a0100e6d34ec1eaaf261644c00fcc8342f19bf86f01da33f61a7fb9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CISA and International Partners Release Malware Analysis Report on Infamous Chisel Mobile Malware

Today, the United Kingdom’s National Cyber Security Centre NCSC-UK, the United States’ Cybersecurity and Infrastructure Security Agency CISA, National Security Agency NSA, and Federal Bureau of Investigation FBI, New Zealand’s National Cyber Security Centre NCSC-NZ, the Canadian Centre for Cyber...

MAL-2023-7956 Malicious code in sb_chatbot_ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 962d49e68e611a6b10b1a3d716d60661cabfa0b0b8d76f43ba0e489e5c20f581 The OpenSSF Package Analysis project identified 'sbchatbotui' @ 11.11.11 npm as malicious. It is considered malicious because: - The package...

Malicious code in sb_chatbot_ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 962d49e68e611a6b10b1a3d716d60661cabfa0b0b8d76f43ba0e489e5c20f581 The OpenSSF Package Analysis project identified 'sbchatbotui' @ 11.11.11 npm as malicious. It is considered malicious because: - The package...

MAL-2023-7945 Malicious code in apirsagenerator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f51b19a4947481fd079e1c85356977c4b103a7bde3938185a453b35db4f94ff4 The OpenSSF Package Analysis project identified 'apirsagenerator' @ 1.3.7 npm as malicious. It is considered malicious because: - The package...

Malicious code in apirsagenerator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f51b19a4947481fd079e1c85356977c4b103a7bde3938185a453b35db4f94ff4 The OpenSSF Package Analysis project identified 'apirsagenerator' @ 1.3.7 npm as malicious. It is considered malicious because: - The package...

Chinese Hacking Group Exploits Barracuda Zero-Day to Target Government, Military, and Telecom

A suspected Chinese-nexus hacking group exploited a recently disclosed zero-day flaw in Barracuda Networks Email Security Gateway ESG appliances to breach government, military, defense and aerospace, high-tech industry, and telecom sectors as part of a global espionage campaign. Mandiant, which i...

MAL-2023-7944 Malicious code in @cybs-ui/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e25c2aa7aae39d30717302a7e0a6b94336a286f1167456157770d53c08d9ba99 The OpenSSF Package Analysis project identified '@cybs-ui/components' @ 7.0.0 npm as malicious. It is considered malicious because: - The packag...

Malicious code in remove-bg-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fdcf2ad8e97745b6be357f0d7c486abc18016cb172caf360362952be6284ce15 The OpenSSF Package Analysis project identified 'remove-bg-cli' @ 2.0.8 npm as malicious. It is considered malicious because: - The package...

MAL-2023-7943 Malicious code in remove-bg-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fdcf2ad8e97745b6be357f0d7c486abc18016cb172caf360362952be6284ce15 The OpenSSF Package Analysis project identified 'remove-bg-cli' @ 2.0.8 npm as malicious. It is considered malicious because: - The package...

CVE-2023-26095

ASQ in Stormshield Network Security SNS 4.3.15 before 4.3.16 and 4.6.x before 4.6.3 allows a crash when analysing a crafted SIP packet...

Malicious code in emails-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d64e5e472a3443e9f96436bd842dbef0c6b3170fae9aa095cf45be67d7a31124 The OpenSSF Package Analysis project identified 'emails-helpers' @ 2.0.20230828051750 npm as malicious. It is considered malicious because: - Th...

CVE-2023-26095

CVE-2023-26095 affects Stormshield Network Security (SNS): ASQ in SNS versions 4.3.15 before 4.3.16 and 4.6.x before 4.6.3 crashes when processing a crafted SIP packet. Root cause not detailed in the provided documents. Remediation: upgrade to SNS 4.3.16 or 4.6.3 (as applicable). Exploit informat...

Validating input parameters with the max value of uint

Lines of code Vulnerability details Impact Validating input values with uint256.max will not revert in any condition as solidity v0.8.0 reverts on overflow and underflow. Detailed description of the impact of this finding. Due to solidity v0.8.0 which reverts on overflow and underflow of integer...