MAL-2024-9009 Malicious code in autocomplete-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cd596b11e151bc765536ac31d81e6203896f3f04dbbf52913aa3b6f1fd2c3e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8984 Malicious code in spiffetest.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7e0c969021c51af38deaa5a56acc3f6a7308ecf137e4051ed32c13918f6f002 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8982 Malicious code in djangosnippets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0bb7ea04063a1c85bc6858187976e5437ffa840e070088dd2b0c4406ebb728c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-30134

The HCL Traveler for Microsoft Outlook executable HTMO.exe is being flagged as potentially Malicious Software or an Unrecognized Application...

CVE-2024-30134

CVE-2024-30134 affects HCL Traveler for Microsoft Outlook (HTMO.exe). Connected sources indicate the vulnerability is an application modification issue in HCL Traveler versions prior to 3.0.9, with the potential for local privilege escalation if the HTMO.exe component is modified or replaced. The...

MAL-2024-8972 Malicious code in internet-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3243e7356e7c50b76a5b743f32d50335abaa4cd8e8a308529d9fd2883206d263 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8970 Malicious code in design-system-intranet-header-workspace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92014e7f1376852bd6f176fc1cefd54ea673d7e95e89db2ec6b1a960e2fb9021 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8968 Malicious code in com.sendbird.chat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4ab38916865b3515a3b2abac6563461d11ff5bbd7ccf48a1c05fddb8547ca28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8951 Malicious code in express-request-ip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d640e010ac10316c3c6f0419c77b933e2695ff224fd189773e30020995ab3895 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8925 Malicious code in basecontext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05b11d319e305490690fe36a31597a9a983ce7ea769f5123feb35cf24b6ac096 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8904 Malicious code in rokihfds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fad727b92f69c33ce99be8084a48ca2fcbbee267db6893b3bcd1a875612cf94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8872 Malicious code in quickread (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f630b92e6f63b18cbb46723f537d664a3aa6d2871a8d3add8834ec33f9d9e40f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8867 Malicious code in node-integration-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23d6de79c4bf861e69bfe8d180b460e32004ab2e37565da361ba8874d29c6a71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8873 Malicious code in sketch-crowdin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 760414998be33a4144fb0eee0455cc462dea5f95e07189b1ff637271a0014974 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in roblox-tracer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4766dbf57e00dc5b3ef46f29e17392167d207c46ccf1a6ea97fc9bcf674cb7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8853 Malicious code in roblox-event-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f08f30c6d48fad2d39e96f192eb0efb0ae97511a98d6ef6b3048b20486f7c30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12243 Malicious code in coffin-codes-pro (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fa99dd73d11cc6b2756fb43cff1eb16f5f80b4ffd436dbfd635b8417f821c7ba So far, it looks like a legit tunneling software, but in tcp.py there is an attempt to send a strange email using gmail. Update: Identified as malicious by...

MAL-2024-8847 Malicious code in ethersscan-api (npm)

The package contains the BeaverTail infostealer malware associated with DPRK threat actors. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bdf32a4e45ba09760610d3f87cf8cfdae4d386a4ee4df99f1973ab577373620 Any computer that has this package installed or running shoul...

MAL-2024-8831 Malicious code in indrive-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 011bd3f8ccaeb08ace40949b5860fb7a582858cf482c46f4e615b2b2db087e18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-45063

The function ctlwritebuffer incorrectly set a flag which resulted in a kernel Use-After-Free when a command finished processing. Malicious software running in a guest VM that exposes virtioscsi can exploit the vulnerabilities to achieve code execution on the host in the bhyve userspace process,...