CVE-2024-28878

CVE-2024-28878 affects IO-1020 Micro ELD (IOSiX) prior to version 360. The issue is that the device downloads code from an adjacent location and executes it without adequately verifying origin or integrity, enabling potential code execution with high impact (confidentiality, integrity, availabili...

Malicious code in f3ngtest12345677 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c45841bc7c5a73373ee4764c017a128bb5dd286d34d5d4a2bf649338aa1644a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lyft-core (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2fa096ec56c6910a67c11cdb8b7ebb3bede054bf1ea7eb926fff07e2265c00dc The OpenSSF Package Analysis project identified 'lyft-core' @ 999.3.9 pypi as malicious. It is considered malicious because: - The package...

Malicious code in qlik-sense-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 65fd03500a82dc6ac997cdeb7275cc6c67cae34d382b293886407c96166bc357 The OpenSSF Package Analysis project identified 'qlik-sense-dev' @ 5.9.991 npm as malicious. It is considered malicious because: - The package...

Backdoor.Win32.Agent.ju (PSYRAT) MVID-2024-0677 Bypass / Command Execution

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2024 Original source: https://malvuln.com/advisory/0e6e40aad3e8d46e3c0c26ccc6ab94b3.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Agent.ju PSYRAT Vulnerability: Authentication Bypass RCE Family: PSYRAT Typ...

Malicious code in iotnet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfce2833c5b3ba2b663b55cd3c22624573a6d5face271696869b0a3c779910ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in soundcloud-songs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1a7a5bdeca432ac351a71a0caac1e58d2f4d31d54fcf357f657e84d8f201f16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in poptoken-builder-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e47c000bd16e968d0cf79cedeb817099f703aeaa335771981d0c5a9f43982b73 The OpenSSF Package Analysis project identified 'poptoken-builder-node' @ 99.3.0 npm as malicious. It is considered malicious because: - The...

Malicious code in fe-bitmovin-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bb423933317049482de1eccf90e5786861fc4d50647ce5fa521c0aeb7a164d25 The OpenSSF Package Analysis project identified 'fe-bitmovin-player' @ 99.3.0 npm as malicious. It is considered malicious because: - The packag...

Malicious code in optus-sport-ctv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e77d4e5b4d39f3120c7742b9d7a7e79b69f2d5a5ed122b1f57add9d3564a752 The OpenSSF Package Analysis project identified 'optus-sport-ctv' @ 99.3.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in cds-banking-prd-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a80797432aad825151adf407bf1a7df167013faed787f2530a93f1736f2a0084 The OpenSSF Package Analysis project identified 'cds-banking-prd-viewer' @ 99.3.0 npm as malicious. It is considered malicious because: - The...

Malicious code in sparklog (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa3ac41199a392a32d649e60da4ff9d98d6ceb0d956297d976ce3b5dc948dc91 The OpenSSF Package Analysis project identified 'sparklog' @ 0.0.3 pypi as malicious. It is considered malicious because: - The package executes...

Malicious code in types-for-adobe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 927dcbc233169c84ab7ef0e97232782f6bb821d476409cc6ccc8587995dabdc8 The OpenSSF Package Analysis project identified 'types-for-adobe' @ 99.3.9 pypi as malicious. It is considered malicious because: - The package...

Malicious code in programmablesearchengine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e202ed286f9758737c48d4cf1c30f0ece100c6433edd1076e9548baa6a2373d6 The OpenSSF Package Analysis project identified 'programmablesearchengine' @ 99.2.0 npm as malicious. It is considered malicious because: - The...

Malicious code in region-optimizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 257c0698203a7d5e178b36eb11760380fab35761c1c54cf601b5f404f170eb8e The OpenSSF Package Analysis project identified 'region-optimizer' @ 99.3.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in teslamotors-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ff47ce37cbaa6b68373ed17ef85fe4403bf2b4865e9ef971a397714d2f7b8cce The OpenSSF Package Analysis project identified 'teslamotors-server' @ 99.2.0 npm as malicious. It is considered malicious because: - The packag...

Malicious code in mytmobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 676558f1795470bc642910cfcb649425633481aa4c72864aa4354baa183ee115 The OpenSSF Package Analysis project identified 'mytmobile' @ 99.2.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1173 Malicious code in google-requests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1f65c90bd401794ac768545381277a23159e66aa5b42a5ea05a38780fbcd691a The OpenSSF Package Analysis project identified 'google-requests' @ 99.2.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in commandlib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64d4a50bf3fdea05ae20a06941d278f50e75d47cacc332a89a31934b2cdef5c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in odyssey-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b408f794010d1926bb9841d26fd28c91c97d8f11d71acea664c92ccb5a06a54 The OpenSSF Package Analysis project identified 'odyssey-lint-staged' @ 9.9.5 npm as malicious. It is considered malicious because: - The packag...