Malicious code in configcat-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa83f7f79893be6fd5e1387e5464a8111c68512b8744756b77814e43a5679c8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8593 Malicious code in discord.js-ytsong (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e2a418dfc51b91035c5d81a2c0db02d6b1046f551e8ef927489b47196cc3e8d0 The OpenSSF Package Analysis project identified 'discord.js-ytsong' @ 3.4.2 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8563 Malicious code in azureml-contrib-daskonbatch (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fbb97c227c663215810abd8867643e6709416bf4e16526391cc0c740f9dce047 The OpenSSF Package Analysis project identified 'azureml-contrib-daskonbatch' @ 1.0.0 pypi as malicious. It is considered malicious because: - T...

The vulnerability of the application programming interface of the microprogramming system for controller security and session management in IP networks – OpenScape SBC (Session Border Controller). This software serves as an integration tool for communication systems into the unified communication system – OpenScape BCF (Business Communication Fabric). The OpenScape Branch server allows attackers to perform arbitrary actions.

The vulnerability of the application software interface for microprogramming controllers, which is used for security purposes and managing communication sessions in IP networks—the OpenScape SBC Session Border Controller—as well as the software used to integrate communication systems into the...

MAL-2023-8557 Malicious code in pod-financier-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25becd0bffc0a2685831f2227d4ee97a1b406d60a899f7c683bfb4fa5af4e1f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ory-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10ee2bc9e167728f46f301228a2569bcd7eda2f19c27f24784dd4497cf1af3be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ory-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97e67d3893cb4ea477e80d85d47524af218e6579c6e04ed4037580b05b45060d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

New Agent Tesla Malware Variant Using ZPAQ Compression in Email Attacks

A new variant of the Agent Tesla malware has been observed delivered via a lure file with the ZPAQ compression format to harvest data from several email clients and nearly 40 web browsers. "ZPAQ is a file compression format that offers a better compression ratio and journaling function compared t...

Fedora: Security Advisory for podman-tui (FEDORA-2023-e359fd31d2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2023-327346caa5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: tor-0.4.8.9-1.fc38

The Tor network is a group of volunteer-operated servers that allows people to improve their privacy and security on the Internet. Tor's users employ this network by connecting through a series of virtual tunnels rather than making a direct connection, thus allowing both organizations and...

MAL-2023-8540 Malicious code in discomusic (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d5ae86bb92ecda0b9d67bf6bcb933e00f57e91de9916d1b3a3ad5a68993c0778 The OpenSSF Package Analysis project identified 'discomusic' @ 0.0.3 pypi as malicious. It is considered malicious because: - The package...

Malicious code in xpub-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc3e9ded369fe8fed74a7f23ab0c33cbbda2a1e16aab8c2283faba59903c49d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Russian Cyber Espionage Group Deploys LitterDrifter USB Worm in Targeted Attacks

Russian cyber espionage actors affiliated with the Federal Security Service FSB have been observed using a USB propagating worm called LitterDrifter in attacks targeting Ukrainian entities. Check Point, which detailed Gamaredon's aka Aqua Blizzard, Iron Tilden, Primitive Bear, Shuckworm, and...

MAL-2023-8531 Malicious code in vpc-nat-gateway-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9417e9eb52b089fd432e5dd38464df3ef02177d6b0d26f9fc664ef56591c4ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in f0-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d39b919f598c91daf62eb8ac34de91c6290cd75d798de1ea5f7b9c3690cab44d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8527 Malicious code in jerrytestjerry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis afcd6612db745033b56fd846df2a95e2611a705900675bdd152150c2518fc2ed The OpenSSF Package Analysis project identified 'jerrytestjerry' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in carvana (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 954bdf3d35f93afe84019ba5192564e1e4538bac34eafa80b8b581db0a7c8d86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spotify-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6884d2a77686f419c030b7aabf153bc9524a9065a79051850a4dc0715d197267 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

What Is Multi-Homing?

Decoding the Term: Deciphering the Significance of Multi-Homing? The term multi-homing, in the realm of computer networking, finds itself surrounded by considerable confusion owing to its multifaceted technical nuances. Nevertheless, it stands as a pillar of network security and dependability...