MAL-2023-7142 Malicious code in tpinforandcpu (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx dbbad442a552640fbceba23d6fcd211e6a412ce4eba182596361ee4bfba82f10 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5050 Malicious code in py-cpupipgame (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9aa7ddbaf98714b79ef4930f19cd7cef73cab49236ca654a9d1304199cef8bbd EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6224 Malicious code in selfintelpullpost (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 01f223308821ee770ccd6d3ccfd8c3a5f4bb30bb1a904ee96723a12855c31abd EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4120 Malicious code in libintelpostlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7b8c49eb53096aa609faa3657c615bb598409179d9307e740be1a1637fd489bc EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4003 Malicious code in libgetmccv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 21a7eb86d269919282405cd1d71bf464c6a1edba9e97d2907bade4c0275a702a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4441 Malicious code in librandgetvisa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3d78245db4c154bc630ee7ffbb7aac37835f15efa96c33360e3f65b4acd3cdd8 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3093 Malicious code in esqmaskstringping (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6dd11e89f86ea34ff8e3f354a3f5c62cd4047a7fe864c9c469ce25c4da25bc08 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3178 Malicious code in esqpaypalvisaencode (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 366549571f324e10b32d2892ffa9bfa5df86e9b6a682754cb5df30e12c3e980a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7139 Malicious code in tpinfonvidiapy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1d07e0ba00f48bb0d216446a13b77bc059f39ed94cacd9214da5e1260900f6ab EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6244 Malicious code in selfkillgameintel (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 79c034082770a234e579946110bfd07f420d80b7585770edc719bf675bda750a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5772 Malicious code in py-visatoolstring (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3ca7b99a951b69594927205db82e424286da00526a9a9e29a106c9c23b21dd4f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5417 Malicious code in py-pepnvidiastr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ad0094b5f9f74e332652f43d7405eac1a957b18f17827429a9b5e7c15cc216f5 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6187 Malicious code in selfhydrapongpaypal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b992777d40644141e2672e9d6cfc0824495c311851f067d867baaef5c75e859e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4994 Malicious code in py-adrandget (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 421c3ce5f003ea17ae991649b6a53391fccc4b9c86180d24edf585716070dc86 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6798 Malicious code in selfvmproofgui (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3be3362f27c3dfa0ddb855100ae3bab6b3374575b6462fe37f44605b8f2d301e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7080 Malicious code in tpguigrandreplace (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9c2596d7313816c100bedfa3fd812ee2aa30a21e78a51e4b1e93fe7d8f1db7c9 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6479 Malicious code in selfpostramurl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f1a68938184e48048c8ae8e7d20b68e8af6928c88024821c33fcef9765613b1d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

CVE-2023-27265 Disclosure of team owner email address when regenerating Invite ID

Mattermost fails to honor the ShowEmailAddress setting when constructing a response to the "Regenerate Invite Id" API endpoint, allowing an attacker with team admin privileges to learn the team owner's email address in the response...

CVE-2023-27265

CVE-2023-27265 affects Mattermost. The issue arises when regenerating Invite IDs: the system fails to honor the ShowEmailAddress setting, causing the team owner’s email address to be returned in the API response. This leakage is exposed to an attacker with team admin privileges who can trigger th...

Fighting online censorship, or, encryption's latest surprise use-case, with Mallory Knodel: Lock and Code S04E05

Government threats to end-to-end encryption--the technology that secures your messages and shared photos and videos--have been around for decades, but the most recent threats to this technology are unique in how they intersect with a broader, sometimes-global effort to control information on the...