943 matches found
MAL-2023-826 Malicious code in sync-https-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 216dcfab006171670a40ded9fe39fcad616a3998fd0c9544be5281a40e766a60 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
MAL-2023-825 Malicious code in sync-http-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 666c54b1098d52ea02eebf562d8cf02c1a736ee608eb15029543afd5181e4094 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
MAL-2023-108 Malicious code in assets-table (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0980e797c7e6db1bd06873799b54350dd781176d8a2e104a7301a51053e3991b Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
Malicious code in other-web3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5fd32cf3ace29e6d712dc9711ce1fc6ce3af43ba9439e86b8f4d37756a79af7f Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
MAL-2023-153 Malicious code in cache-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 967892bb014a13ae52c15c89a3f5ebbdc8e841bf2fd8dbe6502400f91357503d Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
MAL-2023-154 Malicious code in cache-vue (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 09ed266927720d6a151d6cca346f684f5e326b246a5363157496f6840d3be5f3 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
MAL-2023-146 Malicious code in btc-web3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx ecc5f6e374742ff689c439edbd6c978b0393ef967c4ac2d2cf8cdda216b7b483 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
MAL-2023-697 Malicious code in price-record (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3b87630cf8eb8594e67451df7fae7627d35da7c1f67a44b1751201766dbe54a0 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
MAL-2023-947 Malicious code in vue-audit (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx d83b4e200320d89600b71bfb94b2106e5e01fe0c319873c9dac9b0d9661447da Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
Malicious code in audit-ejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx cc5e978bbf3ec0126449bcb0fd362d6238bf3e8658c2e85a28fa9f68128e7227 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
MAL-2023-948 Malicious code in vue-gws (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 557d3dde7707f6cebfde77623067da836191b95969867f4855b6706e5a027e56 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
MAL-2023-112 Malicious code in audit-ejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx cc5e978bbf3ec0126449bcb0fd362d6238bf3e8658c2e85a28fa9f68128e7227 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
MAL-2023-113 Malicious code in audit-vue (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx d1d3fc765f4abce4b198aff5193624f464377e18c77302c696ef9e200869dcb6 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
MAL-2023-910 Malicious code in tslib-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx ef2c27850230a6ec89e578f414b36de97f9850b32450c33921cb68699cf3ba38 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
MAL-2023-951 Malicious code in vuewjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx b899bfc2ad4cc34bb998c5775bb55e7aa7410d54e7fd924f62d666bae1ad40c6 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
MAL-2023-171 Malicious code in chart-tablejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx c6d78e3ccec4aa1bcee41b14b382246c7efaf8a725582a9ab36550d8fc6cb203 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
MAL-2023-304 Malicious code in elliptic-parser (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0ffc8361769988057a4d6c1f79b5cdcf930ac38ce3f5243cd2af71837be266c1 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
MAL-2023-912 Malicious code in ttf-metadata (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx a8165c5b54908b5702e7a9b3b1fb7ac5d71d1ba10ea6e426237f526c4dfe1a91 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
Huawei EulerOS: Security Advisory for compat-openssl10 (EulerOS-SA-2023-2187)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux AMI : openssl (ALAS-2023-1762)
The version of openssl installed on the remote host is prior to 1.0.2k-16.163. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1762 advisory. A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.50...