Malicious Package

Overview @buffer-mono/png-export is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview virdoex is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview mk1 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was installed...

Malicious Package

Overview sapling-output-plugin is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview fc-account-selector is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packa...

Malicious Package

Overview climate-warehouse is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Malicious Package

Overview compositionupdate is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Malicious Package

Overview suncorp-olo-utils is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

openssl: read buffer overflow in X.509 certificate verification

A flaw was found in Open SSL. A read buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification, and requires either a CA to have signed the malicious certificate or for the...

Malicious code in libvisacvcontrol (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx af403b5f4c64465effdccd8f2de7df6ee25077e67bf17ad22aed61900ad0d0aa EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tppaypalproofre (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c76bccdee392d444020b6197e463ac87a45854d2454f4a7e4b58c42568c78891 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Fedora 36 : curl (2023-94df30cbec)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-94df30cbec advisory. - fix HTTP multi-header compression denial of service CVE-2023-23916 Tenable has extracted the preceding description block directly from the Fedora security...

Malicious code in selfgamecvultra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx eee0ff8f62de00184af6dc4b97184d7a4e638eda934d01bed7403ae1a4609fb0 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqgrandcandyproof (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3a6f2edabc0c734fdc35d35102e504410e396d7c11d31512aadaa529c4200320 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in liblibcvsuper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 495641b9d55b1258da95b7c3ee78b647b7da8db04d760cd712c8feda57b077f4 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqosintpostad (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx fd67fdcecea6eece9242bf6a69319c18541abd4aa2eadc780acfd630ac492466 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfgameencode (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9871a842dfbbc2dc38839cc0724b4f50b734a7ffe41bad67b98104125b8ce7c4 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqkillgame (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1fecd30860a061a2f552d9001473587e4e944942de1dfb2f13fbd1d962f14c0c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in postpush (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c1611df8d4579f55acb8455ca9c86695345bef179e1bd2548396fbcfee2188ee EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in adpaypal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c1266810cfbdd92dcfaf68be6940478cc59c38b37a18a8c3a80f65c056b8b055 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...