MAL-2025-46947 Malicious code in monolith-twirp-examples-octocat (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fdfcf3942823c14a7ceea5d23cfca1c1e841ebcea1ba353a95e16d204a90bca4 The OpenSSF Package Analysis project identified 'monolith-twirp-examples-octocat' @ 1.0.1 rubygems as malicious. It is considered malicious...

Malicious code in monolith-twirp-examples-octocat (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fdfcf3942823c14a7ceea5d23cfca1c1e841ebcea1ba353a95e16d204a90bca4 The OpenSSF Package Analysis project identified 'monolith-twirp-examples-octocat' @ 1.0.1 rubygems as malicious. It is considered malicious...

Malicious code in examples-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 518ba4bb1adf28c3721d2c8ff48d014ef14b3672e262a2f6eaa8acbe3a8f0823 The OpenSSF Package Analysis project identified 'examples-lib' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41288 Malicious code in examples-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 518ba4bb1adf28c3721d2c8ff48d014ef14b3672e262a2f6eaa8acbe3a8f0823 The OpenSSF Package Analysis project identified 'examples-lib' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

A Guide to Stakeholder Analysis for Cybersecurity Researchers

Stakeholder-based ethics analysis is now a formal requirement for submissions to top cybersecurity research venues. This requirement reflects a growing consensus that cybersecurity researchers must go beyond providing capabilities to anticipating and mitigating the potential harms thereof. Howeve...

Malicious code in cmf.mes.examples (npm)

The package cmf.mes.examples was found to contain malicious code...

Malicious code in sagemaker_examples (npm)

The package sagemakerexamples was found to contain malicious code...

Malicious code in confluent-examples-nodejs (npm)

The package confluent-examples-nodejs was found to contain malicious code...

MAL-2025-17220 Malicious code in cmf.mes.examples (npm)

The package cmf.mes.examples was found to contain malicious code...

MAL-2025-17333 Malicious code in com.microsoft.mixedreality.toolkit.examples (npm)

The package com.microsoft.mixedreality.toolkit.examples was found to contain malicious code...

MAL-2025-17485 Malicious code in confluent-examples-nodejs (npm)

The package confluent-examples-nodejs was found to contain malicious code...

MAL-2025-9266 Malicious code in @react-native-website/lint-examples (npm)

The package @react-native-website/lint-examples was found to contain malicious code...

MAL-2025-32622 Malicious code in sagemaker_examples (npm)

The package sagemakerexamples was found to contain malicious code...

curl: Insecure WebSocket Usage in curl Documentation and Examples (CWE-319: Cleartext Transmission of Sensitive Information)

The curl source repository contains official documentation and example code that demonstrate WebSocket connections using the insecure ws:// protocol instead of the secure wss://. This misleading guidance may encourage developers to implement cleartext WebSocket endpoints, exposing users and...

Evasive Ransomware Attacks Using Low-Level Behavioral Adversarial Examples

Protecting state-of-the-art AI-based cybersecurity defense systems from cyber attacks is crucial. Attackers create adversarial examples by adding small changes i.e., perturbations to the attack features to evade or fool the deep learning model. This paper introduces the concept of low-level...

That seemingly innocent text is probably a scam

A special thanks to all the people at Malwarebytes and ThreatDown for sharing the text messages they received from scammers. Many of us have received texts like these. Often super short, some flirty, some with a business tone, or sometimes just a simple ‘hello.’ You don't know the sender, and the...

Malicious code in turborepo-examples (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6774 Malicious code in turborepo-examples (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious Package

Overview paypal-examples-langchain is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

broad-dagster-utils (=2.0.0a7), dagit (>=0.5.1 <=1.10.15) +71 more potentially affected by CVE-2025-51481 via dagster (>=0.1.1 <=1.10.15)

dagster PYPI version =0.1.1, =0.5.1, =0.16.0, =0.5.4, =0.16.0, =0.16.0, =0.16.0, =0.16.0, =0.16.0, =0.16.0, =1.0.0, =1.10.0, =1.0.0, =0.16.0, =0.26.15 and more Source cves: CVE-2025-51481 Source advisory: OSV:GHSA-H7X8-JV97-FVVM...