4240 matches found
MAL-2025-4421 Malicious code in ghpglobaldata (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98f6628f3ea3766cb44c71cab1c1a8301235db7c97a186af48166d59c09863c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Scarcity signals: Are rare activities red flags?
By Darin Smith and John Arneson Cisco Talos reviewed six months of network connection telemetry logs spanning June 1, 2024 - Dec. 31, 2024, containing 3,220,829 log events and 742 unique base domains, to explore if domains that PowerShell rarely contacts are more likely to be malicious. Key...
MAL-2025-4572 Malicious code in nb-tsconfig (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in vishal-plugin-flipper (npm)
The package communicates with a domain associated with malicious activity...
AutomationDirect MB-Gateway
RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to make configuration changes, disrupt operations, or achieve arbitrary code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this...
ABUP IoT Cloud Platform
RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to access device profiles for which they are not authorized. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize...
Malicious code in moonpay-sign (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b5de9ec184be265177d407487382fe8b9fb3b0a9b975b1d2570a06d6c054c70 Any computer that has this package installed or running should be considered...
MAL-2025-3939 Malicious code in spingroup (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c39f718dbb6417a92610be6705edea190e4adbccbe0a2e80ede465e0a307c917 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3935 Malicious code in eslint-plugin-i18n-strings (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52f5d25719716952625ab6fabacd4ccb2743e7066584b9b76cf5c198a0ebfc66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in novacredit-global2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e08d91b667c736598ff5998d53a62bc833b8a740b0cd678a4ff9b2a33c99866a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3930 Malicious code in blahblahblah-definitely-not-a-real-package-name (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2200fcdc37007fa010dea283e42096c6211571af64a48492a2fe0b550a39ac62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in apilogicserver (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8beaeb43103672154062bf9b44734e305dad9ba1e9bbc6453d539cefa3e29f62 The OpenSSF Package Analysis project identified 'apilogicserver' @ 14.5.0 pypi as malicious. It is considered malicious because: - The package...
Schneider Electric EcoStruxure Power Build Rapsody
RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for all control...
ECOVACS DEEBOT Vacuum and Base Station (Update A)
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to send malicious updates to the devices or execute code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:...
Malicious code in volkswagen-onehub-components-raj (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c6a188821a8fcc9aba3c1c6731edb7d72a5fb18997b43678070ad3234057f807 The OpenSSF Package Analysis project identified...
MAL-2025-3785 Malicious code in wix-pilot (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ece1c13a8175e046cf322db45e66e2b92e54bcd72dcacc389a974c1bd7bdbf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3779 Malicious code in defi-wallet (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2a9667f769678a9fe048b57918ea5bfd54ef1323131a91f8d9e581feca74948 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3722 Malicious code in solhint-plugin-chainlink-solidity (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 707e27ec2b3a13dafcee9d4ecd372bfd4422048e3ea95c8c5e57a6463777cee4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3704 Malicious code in opensource.ripple.com (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis db6640c2642fecbcd1114796262a8099bf2f0db6e5f020af28ce841c8f35e27a The OpenSSF Package Analysis project identified 'opensource.ripple.com' @ 1.0.1 npm as malicious. It is considered malicious because: - The...