MAL-2024-1391 Malicious code in flexfone-reseller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 18122a6d33435c1fb53b974e49237f471236504fef75bb09e9f0fb41c399a463 The OpenSSF Package Analysis project identified 'flexfone-reseller' @ 100.0.5 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-1389 Malicious code in seller-journey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 60c8dd60bc988a9407b04ce22918c8e8aedc6a7436ea2c74eb3181de1ad876bf The OpenSSF Package Analysis project identified 'seller-journey' @ 5.4.7 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1388 Malicious code in controlbundler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis db9a250abd3db6888ce6c77c0308a1e67927ee02b972e1516c7fdf295f33e522 The OpenSSF Package Analysis project identified 'controlbundler' @ 1.0.6 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1387 Malicious code in sanar-website-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5343e64c2316fbb0e3c6256f74b5b0da7993903262ed71f836a93f2e929ced78 The OpenSSF Package Analysis project identified 'sanar-website-v3' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1386 Malicious code in tec-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 125ddb22e15354e2319586116faa892343d4a86c8f79c9d6ed274d9acfb5f20d The OpenSSF Package Analysis project identified 'tec-docs' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Android 15 Rolls Out Advanced Features to Protect Users from Scams and Malicious Apps

Google is unveiling a set of new features in Android 15 to prevent malicious apps installed on the device from capturing sensitive data. This constitutes an update to the Play Integrity API that third-party app developers can take advantage of to secure their applications against malware...

Malicious code in multiconnections (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d080fb698cec14d7c79b82bff9f6ca58764dbfcd5b487ea88e5822e59e1d74cb The OpenSSF Package Analysis project identified 'multiconnections' @ 2.34.23 pypi as malicious. It is considered malicious because: - The packag...

MAL-2024-1331 Malicious code in roblox.lua (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e40a28a758bd57252f74153dd5b2a9b6358608bfa2ec08c301e3647a7721e35a The OpenSSF Package Analysis project identified 'roblox.lua' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in roblox.lua (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e40a28a758bd57252f74153dd5b2a9b6358608bfa2ec08c301e3647a7721e35a The OpenSSF Package Analysis project identified 'roblox.lua' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1333 Malicious code in threadxpools (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 41a0be6e9aa8db3965bae9f646d47ad6cb85ac9600c8bd71358409062b8fe105 The OpenSSF Package Analysis project identified 'threadxpools' @ 1.2 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-1352 Malicious code in @aluffyz/discord-botjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19d4e14d28ee6d6844110ceb637db248af639739f0215ffe4336c12482e453fb The OpenSSF Package Analysis project identified '@aluffyz/discord-botjs' @ 1.4.5 npm as malicious. It is considered malicious because: - The...

MAL-2024-1322 Malicious code in lamia471 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5b6a082a9defb6d9d2265cf9e9dee0b5e0382c8afda6772a4ee2248d142303d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1314 Malicious code in viseshthemed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a99a24d7c7a3e371e03f234d47d8595232fd3f385a5ba4438f52b90f5c422820 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1312 Malicious code in actions-next-bundle-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a738c63046c2bd1588c1bcc21eafd03d28a480f73643ea8b429ff5fa00da78b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1328 Malicious code in discord.js-hex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 015a5d02bee306302c82f2de4541e008c6ebcc61804819bf894aac181a1c9eac The OpenSSF Package Analysis project identified 'discord.js-hex' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1308 Malicious code in not-exist-lykos-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7a4ae62646ef95a3157dcd61e8c0f58a25bec2c826d45f514c6e7bffde0126d4 The OpenSSF Package Analysis project identified 'not-exist-lykos-poc' @ 66.6.6 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-1274 Malicious code in ui-common-components-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0d823ab954cd19f85bb933d25f8230386023a6a1fd15430efce0298f6a25aa9 The OpenSSF Package Analysis project identified 'ui-common-components-angular' @ 1.3.1 npm as malicious. It is considered malicious because: - T...

MAL-2024-1273 Malicious code in metrics-balancer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c4d7b54aa00bce85364eddf568913642023e355ba669803fa01e20a143e93a47 The OpenSSF Package Analysis project identified 'metrics-balancer' @ 0.2.0 npm as malicious. It is considered malicious because: - The package...

CVE-2024-29402

cskefu v7 suffers from Insufficient Session Expiration, which allows attackers to exploit the old session for malicious activity...

CVE-2024-29402

CVE-2024-29402 affects cskefu v7 and is caused by Insufficient Session Expiration, enabling an attacker to exploit an old session for malicious activity. Original and connected sources (NVD, Red Hat, CVE list, CNNVD, PTSecurity) confirm the vulnerability and its basic impact profile: CVSS v3.1 ba...