PT-2024-5251

Name of the Vulnerable Software and Affected Versions Telegram for Android versions 10.14.4 and older Telegram for Android version 11.7.4 Description The issue is related to the incorrect handling of file extensions in received files, allowing an attacker to send malicious apps disguised as video...

MAL-2024-4911 Malicious code in colaroma (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4810 Malicious code in bip-utilos (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4658 Malicious code in Stl.Fusion.Ext.Services.Net (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4356 Malicious code in Bloсkсore.Features.MemoryPool (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in updated-tricks-v-bucks-generator-free_2023-wi0j (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in updated-tricks-v-bucks-generator-free_2023-gcb8f-ahk-pa65 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in load-secrets-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5c6df792d0b8b82b33553dca5481d1448b9b1b386d33e1cb5baca398cd76f5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-2522 Malicious code in instant-cash-app-money-generator-2023-code-jyerw (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1845 Malicious code in bullshittss (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1657 Malicious code in nodem0m (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae93a7345bbc51bd2c0a267dc582cf90302284606b0f569ae06f4dc6a26f801a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE-SU-2024:1486-2 Security update for cosign

This update for cosign fixes the following issues: - CVE-2024-29902: Fixed denial of service on host machine via remote image with a malicious attachments bsc1222835 - CVE-2024-29903: Fixed denial of service on host machine via malicious software artifacts bsc1222837 Other fixes: - Updated to 2.2...

Malicious code in rb-accordion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 435bf9e58c9f11fe55f80f865ec1f291beee55aaaf1ff78d0235dbf93b35202f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1637 Malicious code in mediaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51b2ce3294e1295bc15a9a9967ceaa66afaddf19884a6ca9ad9fdf2c28bc2526 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1593 Malicious code in ato-z-web-identity-components-app-cdk-adp-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c33c62d31d74de8fa6a7a3911507ce9a8d513bccb45ff1b51b7fbb9068920d3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1581 Malicious code in noblox.js-discord (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d714a330056d61b303e703615cd667da1871ff920b7563ed5d20d42d5b68c7be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1582 Malicious code in noblox.js-proxy-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49cb85854d6a908a38177c4a3c30ac7dd724e1f892e3fbfcb26bb3a146ad2dc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in asf-recorder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0170c1a6080f641f60e56118c5047b047d529133a2aa949043ed62e0bac90488 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1571 Malicious code in asf-recorder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0170c1a6080f641f60e56118c5047b047d529133a2aa949043ed62e0bac90488 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1584 Malicious code in portfolio-organism-adp-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41eb756462a90039b0df22968214c17f7b6bbf6a4aaf0db84da2266a6e33813d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...