CVE-2024-41262

mmudb v1.9.3 was discovered to use the HTTP protocol in the ShowMetricsRaw and ShowMetricsAsText functions, possibly allowing attackers to intercept communications via a man-in-the-middle attack...

Malicious code in psh-hydra-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e602e73e004aedbd93e2617bee443de236f268346b5b57bd42fcd32669825fd The OpenSSF Package Analysis project identified 'psh-hydra-sdk' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from an inconsistency between the data length and count during a write operation in the nfc/nci module, where...

Malicious code in depe-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf5272e13c97b298b088b9e4b50c2900d47ecda4bdb7beccb868c397a7c2ec2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7834 Malicious code in melio-platform-api-client (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb4e0efafa3bf0645819f2aa88cfdc7778f938470c0984afc5e1f1504df982aa The OpenSSF Package Analysis project identified 'melio-platform-api-client' @ 5.0.0 rubygems as malicious. It is considered malicious because: -...

Malicious code in symphony-familiarity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eff03dd28a4225440b053e0619ca9619d5c18fbd90e59b8513587d836b4df052 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7826 Malicious code in nvk-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e0570e31c6c015817cd5fce4308786f1fe2264b4c8bb64fab755b0df9ba0c9f7 The OpenSSF Package Analysis project identified 'nvk-tools' @ 1.2.2 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7818 Malicious code in ent-widget-ssn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d56160353925d7d4c18c2e8cc517fa031138c0b57634f16503d9db72ccbb6087 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ent-widget-ssn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d56160353925d7d4c18c2e8cc517fa031138c0b57634f16503d9db72ccbb6087 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in usaa-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 737879d1d600ff1a2162645b8e3951f8f7f8f9c3494b052c5f28eef84339f1a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7816 Malicious code in ent-widget-military (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbdebed9b78571c779a871a94b08827dce4891379340dbcdcac9864d33d6435d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7817 Malicious code in ent-widget-occupation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ea664a8546797ec435ec8725f1fce33acd75fc620565baa7327765abaf9ea08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ent-widget-occupation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ea664a8546797ec435ec8725f1fce33acd75fc620565baa7327765abaf9ea08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ent-widget-gender (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2c0c2b743a2c55939970f237481ed095952aa3b07c769580ed7564e1be2f14b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7812 Malicious code in ent-widget-addcap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2dac2383ab705d5e1f919508cfae3ccfb37e6f6ae1eca078ed12436c55bc7be6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ent-widget-address (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9273fe0a35c0d622fe4cfcd42ee9fccba89cdaa4c258f0f4af1d476f8d87d38e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testaloni-jarneese (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16fd802241a98377d2a5e9d56c6d2bec85e959b5fb4620749fa77f97836ddbf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4699 Malicious code in cugraph-service-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0246f55913ed7c36615843f23e434366bb7e1491332d526c91700a891ee8fde7 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in 123bla (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d085ff0850c519ea81f21c8be37968a923d4d162e126c3ded06c482b7bdadd36 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in hello-wordl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 238c137f1939d99c855ef5fedf6f16b67ac8fcd9087d80270475d3eeff8e8c65 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...