Malicious code in cryptocomprae (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4e29fff7df870f353d6a62a0418b0904f02fabe855f4df6a2f0e613e81a299fc Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in cryptocopmare (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3511096f9a21250ef5b7091127fad91134f670583a0d95aa813cb28980e14fc3 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in cryptocompaare (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b8d52bf563ad0cbe859cadc80ea21b12a8e22d37b87a483f8febb81715725396 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in cyrptofeed (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 967a960eb73aa620874903a4c9e06d1d08c6e6c89c0749b8952a6849b657619e Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in cryptfoeed (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5533ab552917d5c310d89e65b0a88a54a19429f6eea45abf9b7d606b7ce6bc93 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in cryptofeeed (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 13b429ad70d1963002327ce511d7f329abe9ce3031458f645c0f540d78e511a4 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in crypptofeed (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a7d4c83d8dcd9a01f599042126400f7226278c483b07256dcf12847f889fa471 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in freqtraed (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d3b09b838f7731034ed3cf7888f012a509a01b48dfe6d73216e6dbdc7cebc7a6 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in rfeqtrade (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c92d5b85a3696b3ef33cc5e2ab0d28c83c81ce54a30982c13a0d02b4bde644eb Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in freqttrade (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c5dde4a7da31fbaaeaad6e3ba782422575c76f8ccbd74b1a5daf2146e0ad2b40 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in fretqrade (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6006c2d8bfe788dd4e9c483d3e8eb3eb6d5521c9197bf9fe463f31e878eb35d7 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in freqtraade (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8dee746d88c5636acacd53a078f650424bf8658c8bd173ec8a1ed3e3b2aedc28 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in reqtrade (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9eafd0ca4dd4d799f7fc2c72d39f61b3ea59fd355085c35889d3f640f62bb992 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in cccxt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx bbf77e85143db2624a1691f94e6382f42d72ab92eec168499ba0ac0b1f0081d3 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in ccxxt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2f0475928d01aa7735ccbbd11aea089aa02c703d8449177cd3e5d32636246059 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

NVIDIA Omniverse Kit 代码注入漏洞

The NVIDIA Omniverse Kit is a powerful toolkit from NVIDIA, Inc. for developers to build their own applications, microservices, or plug-ins for their ecosystems. A security vulnerability exists in NVIDIA Omniverse Kit. An attacker could exploit this vulnerability to craft a USD file containing...

CVE-2022-42268

Omniverse Kit contains a vulnerability in the reference applications Create, Audio2Face, Isaac Sim, View, Code, and Machinima. These applications allow executable Python code to be embedded in Universal Scene Description USD files to customize all aspects of a scene. If a user opens a USD file th...

GuardDog 路径遍历漏洞

GuardDog is GuardDog open source a CLI tool that allows to identify malicious PyPI packages. A path traversal vulnerability exists in GuardDog versions prior to v0.1.8, which stems from the vulnerability to arbitrary file writes when scanning specially crafted remote PyPI packages, and the use of...

Microsoft VSCode Python Extension - Code Execution Exploit

VSCode Python Extension Code Execution This repository contains the Proof-of-Concept of a code execution vulnerability discovered in the Visual Studio Code Python extension. TL;DR: VScode may use code from a virtualenv found in the project folders without asking the user, for things such as...

dia -- remote command execution vulnerability

Security Focus reports: An attacker could exploit this issue by enticing an unsuspecting victim to execute the vulnerable application in a directory containing a malicious Python file. A successful exploit will allow arbitrary Python commands to run within the privileges of the currently logged-i...