Malicious code in meli-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 152f98442370419a0e0c3fb36c2e01d398741677238bd205877b136806a6922b The OpenSSF Package Analysis project identified 'meli-api-client' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in lyft-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bad08278af65d859072402dbc935300d4c8d6036f2f214644533c0af1b8f7b8e The OpenSSF Package Analysis project identified 'lyft-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in godaddy-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fbc982202586a71e3e0e5ad119c42a6517f839d2b74320b097508397b127243a The OpenSSF Package Analysis project identified 'godaddy-sdk' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in epicagames-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e0255f17a95ebab8a2dad34723e65be392d1d7bccd4bc5128ee0450c7ab67639 The OpenSSF Package Analysis project identified 'epicagames-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in bookingcom-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f3efaad9e12b23a4ec5230344045108f961982d137157a29edb1283679f35031 The OpenSSF Package Analysis project identified 'bookingcom-tools' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

DEBIAN-CVE-2024-57940

In the Linux kernel, the following vulnerability has been resolved: exfat: fix the infinite loop in exfatreaddir If the file system is corrupted so that a cluster is linked to itself in the cluster chain, and there is an unused directory entry in the cluster, 'dentry' will not be incremented,...

PT-2025-2371

Name of the Vulnerable Software and Affected Versions: Magma versions 1.8.0 and earlier Description: A reachable assertion in the decode linked ti ie function allows attackers to cause a Denial of Service DoS via a crafted NAS packet. Recommendations: For Magma versions 1.8.0 and earlier, update ...

Malicious code in dbximgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3a752546905d1373f7b092a98454b7ca4e820bebecb1af358ce0a6a72fa9a1e8 The OpenSSF Package Analysis project identified 'dbximgs' @ 2.0.0 npm as malicious. It is considered malicious because: - The package communicat...

CVE-2025-23844

creationtimestamp| type| source ---|---|--- 2025-01-16 21:18:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7e5whko2t...

Russia-Linked Hackers Target Kazakhstan in Espionage Campaign with HATVIBE Malware

Russia-linked threat actors have been attributed to an ongoing cyber espionage campaign targeting Kazakhstan as part of the Kremlin's efforts to gather economic and political intelligence in Central Asia. The campaign has been assessed to be the work of an intrusion set dubbed UAC-0063 , which...

CVE-2024-57822

creationtimestamp| type| source ---|---|--- 2025-01-10 13:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lffblzztly2m 2025-01-10 13:38:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lffcvjmkbx2w 2025-01-10 14:05:26+00:00|...

MirrorFace Leverages ANEL and NOOPDOOR in Multi-Year Cyberattacks on Japan

Japan's National Police Agency NPA and National Center of Incident Readiness and Strategy for Cybersecurity NCSC accused a China-linked threat actor named MirrorFace of orchestrating a persistent attack campaign targeting organizations, businesses, and individuals in the country since 2019. The...

PT-2025-40094

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The do validate mem function lacks error handling for the add interval call. A failure in kmalloc within add interval could lead to a null pointer being added to a linked list, resulting...

DEBIAN-CVE-2024-56703

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix soft lockups in fib6selectpath under high next hop churn Soft lockups have been observed on a cluster of Linux-based edge routers located in a highly dynamic environment. Using the bird service, these routers continuous...

CVE-2024-11938

creationtimestamp| type| source ---|---|--- 2024-12-21 07:11:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113689564924062531 2024-12-21 07:14:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113689577483393499 2024-12-21 07:15:33+00:00| seen|...

CVE-2024-21549

creationtimestamp| type| source ---|---|--- 2024-12-20 05:08:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113683419074715879 2024-12-20 05:15:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldpmy4xntb22 2024-12-20 06:42:37+00:00| seen|...

Malicious code in oj-odcs-linked-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d17c600cc0be18696e4ab114d64ad488bd7f257bd8bfe509b372437fb919b0ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Misskey 输入验证错误漏洞

Misskey is a perpetually free open source federated social media platform from Misskey Open Source. An input validation error vulnerability exists in Misskey versions 12.29.0 through prior to 2024.11.0-alpha.3, which stems from a lack of validation and allows an attacker to take control of a targ...

Iran-Linked IOCONTROL Malware Targets SCADA and Linux-Based IoT Platforms

Iran-affiliated threat actors have been linked to a new custom malware that's geared toward IoT and operational technology OT environments in Israel and the United States. The malware has been codenamed IOCONTROL by OT cybersecurity company Claroty, highlighting its ability to attack IoT and...

CVE-2024-43600

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 17:53:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113629799595211149 2024-12-11 13:04:52+00:00| seen|...