563 matches found
Linux kernel security vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the need for the device list to hold an associated lock when modified, otherwise the list may become corrupt...
MAL-2024-1019 Malicious code in eslint-plugin-unicorn-ts-2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b71b5afde24f585fa4738155252aed586c08f3603e822cf5a6ce4b67e2df87fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-999 Malicious code in wickrserverdirectory (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f730645eb2725e8a803ead1923d965ab8417efbdfb226db5f57117a42010263b The OpenSSF Package Analysis project identified 'wickrserverdirectory' @ 6.37.8 npm as malicious. It is considered malicious because: - The...
CVE-2024-23453
Android Spoon application version 7.11.1 to 8.6.0 uses hard-coded credentials, which may allow a local attacker to retrieve the hard-coded API key when the application binary is reverse-engineered. This API key may be used for unexpected access of the associated service...
MAL-2024-151 Malicious code in california-state-web-template-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 91a0432190eb409c84a7c6bf3c06b34d9b7c4571be93f31b3635a925f4a4099e The OpenSSF Package Analysis project identified 'california-state-web-template-react' @ 9.2.1 npm as malicious. It is considered malicious...
MAL-2024-101 Malicious code in wdpr-validators (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3603a1435c7217578ea596fa8e598c1a1a0bf6c955b1c4248b9c9978c9a1c6d4 The OpenSSF Package Analysis project identified 'wdpr-validators' @ 16.0.2 npm as malicious. It is considered malicious because: - The package...
MAL-2024-46 Malicious code in dont-install-me-1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e0c81039808d69543955f41b51ab4057b60025dedbfbdbb94669067d3add194c The OpenSSF Package Analysis project identified 'dont-install-me-1' @ 1.2.3 npm as malicious. It is considered malicious because: - The package...
CVE-2023-51503
creationtimestamp| type| source ---|---|--- 2023-12-31 19:26:49+00:00| seen| https://t.me/ctinow/161159 2024-01-01 01:32:58+00:00| seen| https://t.me/cibsecurity/74079 2024-01-22 12:06:41+00:00| seen| https://t.me/ctinow/171110...
MAL-2023-8752 Malicious code in discord.js-self-v21 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7ff51b0a254299fbcba44e692ad912d759a48d835ffcb10759424392b1debdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8734 Malicious code in next-id-doc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78b8ec553ac410688ce195e0361743232f4c5c356df00d5dfb465da50060f8eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8711 Malicious code in test-codecpetjs-bdd-tests (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis da2ef24d0c6c635c4cc20335bf5babe60d295ebae2df1d4559bbe24373156bc8 The OpenSSF Package Analysis project identified 'test-codecpetjs-bdd-tests' @ 1.2.3 npm as malicious. It is considered malicious because: - The...
MAL-2023-8683 Malicious code in rechtspraak.huwelijksgoederenregister (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0cf3169f51f3ee6c09021cf60f11a4171fed6a0655488a89f8b916c949cbd03b The OpenSSF Package Analysis project identified 'rechtspraak.huwelijksgoederenregister' @ 0.12.0 npm as malicious. It is considered malicious...
MAL-2023-8678 Malicious code in orchestrationdesk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7c4b49b3a4dec106baa72132f15b7493b62457fa4f2bc0c4bf2ddfe83e58ea9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8670 Malicious code in react-hook-form-latest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0cf2d07005ec432f85b35387c34d03f3229f9aaeeff947232ac2f58f6015853 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8650 Malicious code in ui-header (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e93713e0954987e046a76dc0d8345dbc4f887ac8d87d55c593ce1f4ebb01bbdf The OpenSSF Package Analysis project identified 'ui-header' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Associated Press, ESPN, CBS among top sites serving fake virus alerts
ScamClub is a threat actor whos been involved in malvertising activities since 2018. Chances are you probably ran into one of their online scams on your mobile device. Confiant, the firm that has tracked ScamClub for years, released a comprehensive report in September while also disrupting their...
MAL-2023-8622 Malicious code in dropdown-input (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2d336f300d1cbb10697762ccb19e2efa75d88c7a9f180ca4e472b6861b6d5ca0 The OpenSSF Package Analysis project identified 'dropdown-input' @ 3.4.15 npm as malicious. It is considered malicious because: - The package...
MAL-2023-8618 Malicious code in place-zip-autocomplete-input (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 80a9eda07bbcecc8a168b9ef0252e04b4b97abe222e5d8445113a1ae34c71a6d The OpenSSF Package Analysis project identified 'place-zip-autocomplete-input' @ 3.7.14 npm as malicious. It is considered malicious because: -...
MAL-2023-8617 Malicious code in input-error-field (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 79dcfa06fd8077b1f16a7239a63b81c36bf0fdc404da2afcbe7ae40333f1c04d The OpenSSF Package Analysis project identified 'input-error-field' @ 3.7.14 npm as malicious. It is considered malicious because: - The package...
MAL-2023-8508 Malicious code in zoo-web-components-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f5a033ba4e84e9b29f5eb20d41c448241b24f20fb48b6ad382babb24543441f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...