CVE-2024-21669

Hyperledger Aries Cloud Agent Python ACA-Py is a foundation for building decentralized identity applications and services running in non-mobile environments. When verifying W3C Format Verifiable Credentials using JSON-LD with Linked Data Proofs LDP-VCs, the result of verifying the presentation...

Malicious code in effect-layout-function (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in invalid-dependency (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @justworkshr/alma (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in talk-desktop (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in css-blocks-ember (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in example-app-node (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in whaletail (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

CVE-2024-13448

creationtimestamp| type| source ---|---|--- 2025-01-28 06:44:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113904625814112822 2025-01-28 07:15:19+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrvuc5lru2f 2025-01-28 08:48:25+00:00| seen|...

Malicious code in meli-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 152f98442370419a0e0c3fb36c2e01d398741677238bd205877b136806a6922b The OpenSSF Package Analysis project identified 'meli-api-client' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in lyft-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bad08278af65d859072402dbc935300d4c8d6036f2f214644533c0af1b8f7b8e The OpenSSF Package Analysis project identified 'lyft-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in godaddy-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fbc982202586a71e3e0e5ad119c42a6517f839d2b74320b097508397b127243a The OpenSSF Package Analysis project identified 'godaddy-sdk' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in epicagames-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e0255f17a95ebab8a2dad34723e65be392d1d7bccd4bc5128ee0450c7ab67639 The OpenSSF Package Analysis project identified 'epicagames-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in bookingcom-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f3efaad9e12b23a4ec5230344045108f961982d137157a29edb1283679f35031 The OpenSSF Package Analysis project identified 'bookingcom-tools' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

DEBIAN-CVE-2024-57940

In the Linux kernel, the following vulnerability has been resolved: exfat: fix the infinite loop in exfatreaddir If the file system is corrupted so that a cluster is linked to itself in the cluster chain, and there is an unused directory entry in the cluster, 'dentry' will not be incremented,...

Malicious code in dbximgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3a752546905d1373f7b092a98454b7ca4e820bebecb1af358ce0a6a72fa9a1e8 The OpenSSF Package Analysis project identified 'dbximgs' @ 2.0.0 npm as malicious. It is considered malicious because: - The package communicat...

CVE-2025-23844

creationtimestamp| type| source ---|---|--- 2025-01-16 21:18:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7e5whko2t...

Russia-Linked Hackers Target Kazakhstan in Espionage Campaign with HATVIBE Malware

Russia-linked threat actors have been attributed to an ongoing cyber espionage campaign targeting Kazakhstan as part of the Kremlin's efforts to gather economic and political intelligence in Central Asia. The campaign has been assessed to be the work of an intrusion set dubbed UAC-0063 , which...

CVE-2024-57822

creationtimestamp| type| source ---|---|--- 2025-01-10 13:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lffblzztly2m 2025-01-10 13:38:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lffcvjmkbx2w 2025-01-10 14:05:26+00:00|...

MirrorFace Leverages ANEL and NOOPDOOR in Multi-Year Cyberattacks on Japan

Japan's National Police Agency NPA and National Center of Incident Readiness and Strategy for Cybersecurity NCSC accused a China-linked threat actor named MirrorFace of orchestrating a persistent attack campaign targeting organizations, businesses, and individuals in the country since 2019. The...