MAL-2024-12020 Malicious code in payment-tx-params-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6861efcfa7f8e30a646e9a76387e80446245c2f7ce4966e55da1c8e6d34fcd9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11949 Malicious code in cdp-wallet-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06a2e526944349b6f95ab9040fbfdab31744714123a43d7b0de6b223d1f5fe84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12002 Malicious code in metamodel-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f82fb4d86a302779b75cb5721517e80e827b6e6fe5368f3639b294b46e21cbd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xeno-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 388f6e19c676bafc11f44e7609b56a922f80263a992ec95da08a18901aae51e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11963 Malicious code in deathball (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c700f66a895bc72be5f345b586961fde0348594f4113f1ee079c3b67fe203f35 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in core-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3799466b97533aa31a0abe7ca229c41f551bbf8e1a3e264fb5af6b2bfe7078c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11939 Malicious code in action-testtttt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76afe05559b1759ff69fe0657362b303c6e8bff5a5221305fe01dd0842a1e5f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11940 Malicious code in actions-languageservices (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6468057d6ae17756ec02b7293da5160697424f26a39e172bce32c38a2b2337b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11965 Malicious code in dependency-review-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb9bad81419f4cfa2078b1228e521070aa1d15f91e26a58d7ee754871cd614c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in go-dependency-submission (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa0e3837d434167d18ab0ba251b0ce73d56ed83a0c773df12c8ebd99542f8eaa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-8820

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential use-after-free UAF access issue has been identified in the Linux kernel, specifically in the scsi: ufs: bsg component. The issue arises from not setting bsg queue to NULL aft...

MAL-2024-11903 Malicious code in hackbro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc47c5f305fc03f562acfd324aa89273fb66507dc4c37bef544dec43fe8ef5c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in windows-version-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 613ba7ede540f232f2e844b88d0e3dbdee0806c83dfbf4cf4bf4ca7a5430aa33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in downloadsolara (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8fde9e23e5d6faf3807847475feb0e29efe5c2d51f5350cbcca42a0024945c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 000webhost-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a062b5381190f14c3f396fa21385c5ae1c204f891341b96ad8e1e5f9614ed1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Upcoming Speaking Events

This is a current list of where and when I am scheduled to speak: I'm speaking at a joint meeting of the Boston Chapter of the IEEE Computer Society and GBC/ACM, in Boston, Massachusetts, USA, at 7:00 PM ET on Thursday, January 9, 2025. The event will take place at the Massachusetts Institute of...

CVE-2024-54304

CVE-2024-54304 is an SQL Injection in the Hive Support WordPress Help Desk plugin. Affected: Hive Support – WordPress Help Desk (plugin) versions up to 1.1.2. Root cause: Improper neutralization of SQL elements in the vulnerability path. Impact: authenticated attackers may exploit to manipulate S...

MAL-2024-11829 Malicious code in imgur-uploader-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e12db7b7de507126d4fa046e84a7acb1e502c87e639c69d90159cd396bed2b84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11830 Malicious code in imran-dlmedia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2333403d155a3c1e1f283f0fdb315ee94b8315d41551e7e56e0ee12b8e86dc75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11826 Malicious code in fca-imran-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 358afd8d601316f313a38fc5c4433ff8b13a1082ec2c05ea6c91464b62d5125f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...