Malicious code in selfminemasknvidia (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3889a3454568b127aae51b308bf2589faf568ec81fb6ec4efd839218aec0dffb EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqstudyedgrand (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3eeedcfc8d93a78ce7f9b651214f0b08f587e2d75e8d6f4a2a30afa0a3e3a1d9 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6099 Malicious code in selfgetrepush (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f4e1f0f21e8be882bda7498709d397449811c1af7946aa0977eb4d8bd3a8ceb1 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2867 Malicious code in esqgameedver (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 80f94c8805d0fda942878006d78593a6aeaffeaec360a28ccf39fbfacb20a28f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4991 Malicious code in py-adpongultra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 21e1cfbde4f14be53e83dbddf0d4748349fe3edf47003e1bf1a55ecab9d43901 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqurlosinthydra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c2b81f9025574f782c0882cff76099a358bc7514bd4677e7458bad24ac5b2c7e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libsuperproofint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1b540df09895da8fd5024a2a2fa420bd55229d6455be32b339091896ea5308d1 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfrekillrand (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ad3cc244c2074fd9613d3f55c6a0fea5d10a3b64f1ec8434f929ffa788745dd4 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6680 Malicious code in selfsuperstrpaypal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c2744adbc3a0e48a52b341b19bb00f50322a7f1bc0c7ae906de6ade86c1a6b1c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3067 Malicious code in esqloadencodeosint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d17d8432fe2335ff76db636d5d79e9852b40ada53694f89cc46079446e639da2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6097 Malicious code in selfgetminecandy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 66109f4d7c11dfcf16f1dc93af6afd4afa6d5540ae5b484d106586267a901fe2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4194 Malicious code in libloadhackedpyw (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c573bcaf51676f3e5fa15902066a93d0d57942556a97ac03f2a3fe886ade2c75 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6479 Malicious code in selfpostramurl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f1a68938184e48048c8ae8e7d20b68e8af6928c88024821c33fcef9765613b1d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfpostramurl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f1a68938184e48048c8ae8e7d20b68e8af6928c88024821c33fcef9765613b1d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2849 Malicious code in esqedstudynvidia (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c65e9fbca2a985a9d02820bd6f6ebec1783bc6617f610cc8d21565be80cd9a89 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Expedia Group Bug Bounty: https://www.wotif.com/vc/blog/info.php script is prone to reflected HTML/CSS injection and COOKIE leak

The info.php script on https://www.wotif.com was vulnerable to reflected HTML/CSS injection and COOKIE leak due to caching of HTTP headers. An attacker could inject malicious HTML/CSS code and steal victim cookies. The vulnerability was reported to the vendor...

Malicious code in esqgrandhttpreplace (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 42a610a43aa7326b0be22ead65b1a49dce7978f2bd5536242be9583aa5bc69bb EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7161 Malicious code in tpintelpepcraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx fc19ba240ff76fc7e4fc4d165e353608668ebdb3fbdb9d0a836c177d177ad0fa EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7456 Malicious code in tppyencodepull (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b00d54d55ac515db630e72e6e0c819437b4e0290d7810c9ab73e7eee5ed778b1 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4282 Malicious code in libpaypalhackedlgtb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 09fe30dc7f1ee122013b8b189af5d2189f0b106b9b876a5fa48819228134d23f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...