MAL-2023-2520 Malicious code in candyinfo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 11230ef7ac2dc1e301861321a6f1e66f61609d46d4f6e7472c88729f5a18b73f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3631 Malicious code in gettool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a3a852339f275ba88c7b4d69d6a5b4a657c2c252155e381b4e5eabe01a74480e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5844 Malicious code in ramget (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 94cf38cd9e7432c6a9a7b7e8ed4f013ac977d87040947ea5dc59653ecf4a77e2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3606 Malicious code in getad (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e4a7934755283db7f149551b528b3d706d17e6a1f8d8858b3bff92946a33029b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4784 Malicious code in mineurl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b1e1643beb919f07a2ecfb72349840fe9cb0f77296add1516c91801e7439b02e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6901 Malicious code in toolurl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e09e01a43528ea02543fd395b77fcf19e5be52130e84b18d34199571882f1320 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5861 Malicious code in rampyw (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a185d80c5ca7b07ec1d0c24ba2af02c798799f60b75a505f1325aa031f9f3136 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3735 Malicious code in httpload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b3fa86d86038d148214469f432078f10e6b2e4e8f1df073ef7e6fb411de92d53 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5807 Malicious code in pywgame (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0428fb107710200dbe5ed6453905e0c426feae920ae0bb18fca3a9139cf94155 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2483 Malicious code in adgrand (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c3c82e57a7f206719c3f736eb287e8f4737854e1f7d9e3578af29bbb284ac2cb EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4696 Malicious code in loadurl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 07a7de66a6f12492bfd80b1ccc245055129a97ccd5096f9a9f0c8e38d1e9bde2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2604 Malicious code in cpuget (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1557e7146fcecf8ca3c975e30f9b887b047f450dc400479483b3beca7d26cf10 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3698 Malicious code in guire (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b31573811a8ffe0cd642896c6db9f40e74abd0c608150e76925263c39d69c9f8 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3585 Malicious code in gamehttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1ab0ef0f70fcdd15fd68bbd5fdade521db6eccaaf2b0d603933448150c0a0f79 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6896 Malicious code in toolre (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e21506ba843e51b0c726d201d1acd51401aa3f192c54a9a49289ae58904eb2c7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3620 Malicious code in getload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d2a573a5e8ff7971dff21ea43685c4cc29fabd013068fd1a0756f09dc75b47dd EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3667 Malicious code in grandurl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c79a2a8050c68b81599a731575a18aa80a6a035a57fe944a6d3c69e7841f7b60 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5899 Malicious code in recandy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 046362147b4ca835b72f84706cb347e503459a29031bd0f50d893cffd111bccb EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

CVE-2023-0815

CVE-2023-0815 affects OpenNMS Meridian and Horizon (Jetty logging path). The issue enables potential leakage of usernames and passwords via Jetty log files when debug-level logging is active. Affected products are OpenNMS Meridian in multiple versions and Horizon, with remediation guidance to upg...

DNA testing company fined after customer data theft

DNA Diagnostics Center DDC, an Ohio-based private DNA testing company, last week reached a settlement deal with the Ohio and Pennsylvania state attorneys general in relation to a 2021 breach that saw the theft of 45,000 residents' personal details. Overall the attack compromised over 2.1 million...