Malicious code in mesbah-unclaim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 263dd8e3a7c219627fe6ca196c18bb5262996c68f086fd118d74caec6e06aee1 The OpenSSF Package Analysis project identified 'mesbah-unclaim' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in kobi--front-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5177d79e84b460a9e6e01e3f7ec740846cab3ff8094ccf7fa38232683498d45c The OpenSSF Package Analysis project identified 'kobi--front-helpers' @ 1.15.0 npm as malicious. It is considered malicious because: - The packa...

Potential SHA256 Digest Vulnerability in Solidity Contract

Lines of code Vulnerability details Impact This vulnerability enables the hacker to pass malicious data to the "verify" function, which in turn uses the said data as input for the sha256 function, this can lead to unexpected or incorrect output, potentially resulting in unauthorized access to...

Malicious code in gtf-error-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c82adcb211353de0790c397f626068e2d5397effcfd904dcfeafd92cb450f2f1 The OpenSSF Package Analysis project identified 'gtf-error-tracker' @ 99.9.8 npm as malicious. It is considered malicious because: - The package...

Malicious code in py-pongmaskgrand (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ca30eca9847b01b8f2ecc7107ed916e8f7418cab08e81146c6ce73077afd3ea7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libpushintpong (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1675e5d330eccdd419b14df2cd6a1d06edc09a0139276575bd00be219e0783c0 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tpmchydracraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ac25be04b8afa37c1f9be85c566672690932ae38e50a4701a7d79a7d143bb431 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-maskhacked (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7559cba6b2cd3e9c2cb4c8ee51fd43bfd2bbe3725e21905e129555fb9b968ead EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3810 Malicious code in intelcraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 87be178c366923773d23bbd4a1ea2f6c918620fde80b7cd1c618ff7f4f821f5b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

iPhone calendar spam: What it is, and how to remove it

If you open up your iPhone and see a variety of messages claiming that youve been hacked, your phone is not protected, that viruses have damaged your phone, or, my personal favourite, "Click to get rid of annoying ads", fear not. Its quite possible youve accidentally wandered into a common form o...

SUSE CVE-2017-1000499

phpMyAdmin versions 4.7.x prior to 4.7.6.1/4.7.7 are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc...

Malicious code in eslint-plugin-dropbox-sign (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef0b78a956b34b6e0c3db65f1f623e28b0e80753ffae8ea19c75e4217f1dc0b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-2002 Malicious code in prompt-toolkiit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d580c098686d198715824a4368bd2e02c21d8d4d659d87888070e4cc8c662c9a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2344 Malicious code in urllibb3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8b16bf040d4e28e919f12abb8400a6c9c181ff72e7dc73d544cc1a621ac00aea Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1580 Malicious code in aioohttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx bb824328257869526886253ac73ffff25818657e686f17b1ddf173da74c45abc Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2063 Malicious code in pygamme (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 56d94a718f5ad009be706a22e0638abd24db39d417c918acaf8a135afc7d1760 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2217 Malicious code in scikit-leran (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f153c03bad0b93fd0b624eec402a80347c6346c034b4a1542a3c3bf458b14c89 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2246 Malicious code in sikit-learn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 60c0697ee2737b8feab28a88e8029765d3f525dc40e7957c56161aaaef6d6ba8 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2305 Malicious code in tensorflwo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 758ac6d80263cf95ff52c4d2dfdf8ece9bd443edd1e3c7062e7a0b3b45f69b2c Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1907 Malicious code in matpltolib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c335a789dcce1af7de0ef188d9b3a6a90a7e44d4d9187532047186a864607c34 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...