Malicious code in 32red-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e16d461f49ce237448a5ebe2cecd68f816f19e3209965bc445d5e57a89ff938b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

390,000+ WordPress Credentials Stolen via Malicious GitHub Repository Hosting PoC Exploits

A now-removed GitHub repository that advertised a WordPress tool to publish posts to the online content management system CMS is estimated to have enabled the exfiltration of over 390,000 credentials. The malicious activity is part of a broader attack campaign undertaken by a threat actor, dubbed...

MAL-2024-11825 Malicious code in rarible-program-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ebfe242bd7c35911f61115ae2c00d485a5bb93b81ddf36f6f40af24fb1cd977 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bug-bounttest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c7018070d75a9db3006ec183ff527cb9b6ee7d018d852bf06d3892a04874aa03 The OpenSSF Package Analysis project identified 'bug-bounttest' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11786 Malicious code in paypal-js-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6775b74cea176b7aaff3429e4e55a224d9f03da9865a07c99940ff7f0cf1162 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11784 Malicious code in shyftportal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c420e2c055c4dac21abe5aa3deacde16aef6dcd57335d4244adffc4346365a2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Rockwell Automation Arena (Update C)

RISK EVALUATION Successful exploitation of these vulnerabilities could result in execution of arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize network exposure for all control...

Horner Automation Cscape

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to disclose information and execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize...

MAL-2024-11251 Malicious code in @neo-ds/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eb7303825f9830a20957d406c7a1b9193816b17c907592e4fa1e8a6fa48c61e3 The OpenSSF Package Analysis project identified '@neo-ds/components' @ 3.3.7 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11245 Malicious code in tripadvisor-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c430074a1fd3319e4d1988f453c9a5cc9f7df15fc95b8a95de824c3a9badbbef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bbbx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f65327748810d1f9ddedf9a740022a1a282e2ed41e6d5f62db78c7b1216d83b1 The OpenSSF Package Analysis project identified 'bbbx' @ 1.0.4 npm as malicious. It is considered malicious because: - The package communicates...

MAL-2024-11241 Malicious code in bbbx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f65327748810d1f9ddedf9a740022a1a282e2ed41e6d5f62db78c7b1216d83b1 The OpenSSF Package Analysis project identified 'bbbx' @ 1.0.4 npm as malicious. It is considered malicious because: - The package communicates...

MAL-2024-11222 Malicious code in prettier-v3-for-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 522c1e741b8482af7e3577e20c83b8e29a0f217b9c951d0e815e5c01af165408 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

“aiocpa” Python Package Exposed as Cryptocurrency Infostealer

SUMMARY The machine learning-based threat-hunting system of leading threat intelligence and cybersecurity firm ReversingLabs RL recently detected malicious…...

MAL-2024-11202 Malicious code in buoyant-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a848aad4ed9b021dd1c4df3717c23fc8ef9578378c9bb92abe8f921a77ea100c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11201 Malicious code in coldbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8841e2d0dbc754df7eb19a7b42426c538506e0fc7412d08422bbd8f2cf983d73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11200 Malicious code in quintoandar-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36d0f52e6a3bbd3fdbc84b19ad4b18ff69ea20aa7dbb1fd508917d33072259ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11188 Malicious code in private-lib-bug-bounty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ef8c8e73b8b4d3414d06cadfd08f308a41276fe31204d26bc85d1eb566c4923c The OpenSSF Package Analysis project identified 'private-lib-bug-bounty' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-11185 Malicious code in com.bovinelabs.analyzers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5dc2ba08a52d30a711e8297ca2702ffd73f503608a85ae5d88e47aa32c7c5c73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Cisco Warns of Exploitation of Decade-Old ASA WebVPN Vulnerability

Cisco on Monday updated an advisory to warn customers of active exploitation of a decade-old security flaw impacting its Adaptive Security Appliance ASA. The vulnerability, tracked as CVE-2014-2120 CVSS score: 4.3, concerns a case of insufficient input validation in ASA's WebVPN login page that...