Active Exploitation: New Aquabot Variant Phones Home

...

Malicious code in gatsby-theme-tinker-tailor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5df1c0054184f09396ef18554ff586b8264bd0fd8bfb34db6eb37fb5bcf37fe4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-22315 IBM Fusion improper communication restriction

IBM Fusion and IBM Fusion HCI 2.3.0 through 2.8.2 is vulnerable to insecure network connection by allowing an attacker who gains access to a Fusion container to establish an external network connection...

CVE-2024-28786 IBM QRadar SIEM information disclosure

IBM QRadar SIEM 7.5 transmits sensitive or security-critical data in cleartext in a communication channel that could be obtained by an unauthorized actor using man in the middle techniques...

Unlock the Boardroom with Cyber Risk: How the Qualys Enterprise TruRisk™ Platform Empowers CISOs

The Changing Landscape for CISOs " If you can't measure it, you can't manage it." - Peter Drucker This timeless adage by Drucker resonates deeply in today's digital era, where managing cyber risks has become a business-critical priority. According to a recent survey from Splunk, Today, nearly 50%...

Malicious code in dummy-loosesight-gc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f78553519ec74b4ac5b242e553f94941b613be837aafdbfebf10f45f36dbdad5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @adsk-forks/jsonpath (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b3b2039104a753b08abe81f7754ff405d8e3206c92b7251c857b28e3431fdc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-587 Malicious code in swift-login-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbad853440515e1762a39bb7b7d5a115b77cf243fd0ee0b3bbd82c1ac8bab0c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pascoresend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6eb745bf1dd58bd41204dc547be9cadb3cbe35b5d804c45735c78cf6c33fe4ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-583 Malicious code in casier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08fbcdfa482a4508e9f9c2f90db55d75e512d0876a2465d216815c469f07fe52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-559 Malicious code in eslint-config-scality (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 315c3576289454d26857298b5dd200578c8f7002ae98ec2a45a9d51ec1f8438d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-scality (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 315c3576289454d26857298b5dd200578c8f7002ae98ec2a45a9d51ec1f8438d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in meli-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b80dc7c95a0c94ba3c1461bd56eec4549eb0b20a3a3e8b9795b29e5647b55f3b The OpenSSF Package Analysis project identified 'meli-admin' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in meli-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c7d0ea07d51fa1a590737fa0586578db983b776c21cb15f0597463d7046dea8 The OpenSSF Package Analysis project identified 'meli-cache' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in meli-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 793bfcfb95a79b8cd268833db69c5dc0bc95766ce7acef8947614e19d8e27afc The OpenSSF Package Analysis project identified 'meli-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in meli-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb28bf7bab07e7d8ce966bd32c13cf1917b50adade7a33b66bb6e39c74710827 The OpenSSF Package Analysis project identified 'meli-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in lyft-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a2f01e05b592462f5cd8959f49eb75aea1f7e08d9c9c2a1e817953e0c06e3c84 The OpenSSF Package Analysis project identified 'lyft-user' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-547 Malicious code in meli-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2fd228933bfbd22b6537f1ebb684b7d183ba26dc3647c4b9cffb7e5a089ecac1 The OpenSSF Package Analysis project identified 'meli-auth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-548 Malicious code in meli-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ac505cb26eb829b7873ae3ef5920a2fe35d4627fc36c958e35a24d261e0bc7df The OpenSSF Package Analysis project identified 'meli-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in meli-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9249d44462b60e1bb8316d13cd455eaa9e98c79213089c77eafe6020eb1507f4 The OpenSSF Package Analysis project identified 'meli-gateway' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...