MAL-2023-3585 Malicious code in gamehttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1ab0ef0f70fcdd15fd68bbd5fdade521db6eccaaf2b0d603933448150c0a0f79 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in httppip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2936732efd565e943184d6252a6056929f4de91644279cfd696d0d0e10ea4ade EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3706 Malicious code in guivm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx fc32794ad312aabedb56bdf292918a233490e4e8fabd0d5f868a81ebfd2cac6a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-978 Malicious code in xsstesttttttttt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc8748b83babc4682dcf2d5828d03fe1d54b31a1cce16fa636448eb65f310eb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-435 Malicious code in fe-core-components-vuejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d60e569c72a226b7f460fd4ee1792523d0c53a9206b27aef9a6d2774378754ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-537 Malicious code in jquery-mask (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60c2e86401517688fc0bdbd68e989cce56834a9c11090e0a27fd0e0b5cdf9ca2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-111 Malicious code in attribution-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5afc91a8d62e415d605efc5e9b132faa79e4d67b5aa087375dff9b544b70715c Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

SUSE CVE-2017-5397

The cache directory on the local file system is set to be world writable. Firefox defaults to extracting libraries from this cache. This allows for the possibility of an installed malicious application or tools with write access to the file system to replace files used by Firefox with their own...

MAL-2023-2248 Malicious code in simlpejson (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4cfde2df33b3ec54e8efeb6c165ccb068cb68ed0042691fdce6ee98dbb5f8003 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1677 Malicious code in ccx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4b65e79327daa2cc5ec5b36d4f94dde43607d8cb595f276122659ef69d86a25a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-65 Malicious code in @superbet-group/web.lib.vue-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0177c1a71b6ddf84d3b320b15eb180edf94406c0f6a4f07ad0b4ca33fcbb52fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-66 Malicious code in @superbet-group/web.types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3a0aaf7c7b5a8aedf6bc88f0778aee51462546adb577e4116a18d36d41462d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-34 Malicious code in @chegg/wtai-upload-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed3e4233e6f2d188d7f2bab940bf8574017cf73a97b440daddc7f4e3176075a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-927 Malicious code in usamaturk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87d02f6bdc2aef87b1fe34c7c3d0e97fe812b9e1be74c7c06da4c0a05e276a45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-883 Malicious code in thenamk3z (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7136bd556e8bf67544b369c2583a529fc5c8dd8153920ecd46d37007562040e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-858 Malicious code in testneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c5bc4adbdc90c94de1d80650508a0952b81e7cac9c2d2307982fb42be7eea49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-31 Malicious code in @buffer-mono/png-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9244d2dab3f1dfded05311dc18e1475aa475a5526b78409227c8b03dae2d3091 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-943 Malicious code in vpro-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f253aa388076bf368b5ac423864b7d018841dec34f8653f44275ebda501d6a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-400 Malicious code in fca-hrz-remake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b42a9f434f83ad9b083b69c15d70efcc6a935e51b8b0e4a0ee178a7ea81592e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-228 Malicious code in dataminr-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b286dc20121800a015dbb4aa930090547527e1263d319be083abaa48972a725 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...