Malicious code in synology-hct (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0cd5002af7b65ef6ae8e56c673b139b37509df9c2752d18fd435d991783701ec The OpenSSF Package Analysis project identified 'synology-hct' @ 10.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-91 Malicious code in synology-hct (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0cd5002af7b65ef6ae8e56c673b139b37509df9c2752d18fd435d991783701ec The OpenSSF Package Analysis project identified 'synology-hct' @ 10.1.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in newbooking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c36258c896dcadd103fd2263e6d19e4ae885350c438c2efc971e816f7d39215d The OpenSSF Package Analysis project identified 'newbooking' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in shoponline.epiroc.com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0af86d9c1fc83f25835c1b437a93a6a278c5bcb1cfd811a0892fc93af187d0a4 The OpenSSF Package Analysis project identified 'shoponline.epiroc.com' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2024-86 Malicious code in shoponline.epiroc.com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0af86d9c1fc83f25835c1b437a93a6a278c5bcb1cfd811a0892fc93af187d0a4 The OpenSSF Package Analysis project identified 'shoponline.epiroc.com' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2024-83 Malicious code in api-utility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6a224689494381a4efa5f5c4b27d5d186501f995fdedef22fb6141dd252e1e39 The OpenSSF Package Analysis project identified 'api-utility' @ 1.1.999 npm as malicious. It is considered malicious because: - The package...

Horner Automation Cscape

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Horner Automation Equipment : Cscape Vulnerability : Stack-Based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code. 3. TECHNICAL...

MAL-2024-55 Malicious code in internal-test-devoxx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fb92a072265a550a5ce1cc1d16f096b636845bc8edabaf60bddfebad43c423bd The OpenSSF Package Analysis project identified 'internal-test-devoxx' @ 0.0.4 npm as malicious. It is considered malicious because: - The packa...

Malicious code in onetake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 52bec93f09b5dc6085214609ef35d8aaf2346d6e50e6a12e5304e16aa3493ae2 The OpenSSF Package Analysis project identified 'onetake' @ 1.1.30 npm as malicious. It is considered malicious because: - The package...

MAL-2024-50 Malicious code in optimistic-cart-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0518690394723fc9bf03f60d8192f09e4133e8398d94ec7b04d2fa9ac26796be The OpenSSF Package Analysis project identified 'optimistic-cart-ui' @ 0.99.99 npm as malicious. It is considered malicious because: - The packa...

griefer can create maximum length time locks for other users with only dust

Lines of code Vulnerability details Description veOLAS is the voting token for the OLAS protocol. It functions like the curve.fi voting token in that a user gets more votes the longer they lock their tokens. A user can create a lock for themselves or have another user create a lock for them, usin...

MAL-2024-45 Malicious code in dont-install-me0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bcf8126d43ca2823d8d0d521cade7b0889b21af7135c79116a1f03139011cf43 The OpenSSF Package Analysis project identified 'dont-install-me0' @ 1.2.3 npm as malicious. It is considered malicious because: - The package...

MAL-2024-65 Malicious code in replit-extensions-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7462f6e9b4a4fb60632168e7333f43126c172c42dbe957ea9288df7461840fa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-61 Malicious code in akshansh-jaiswal-ctf-security (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1a21cd8cd0f3e40599808c19641304a3f52f263a31d9b68e9847bc4c6933cc80 The OpenSSF Package Analysis project identified 'akshansh-jaiswal-ctf-security' @ 99.9999.9999 npm as malicious. It is considered malicious...

MAL-2024-44 Malicious code in noblox.js-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 241387eedcc17cd69cbec9253b8a7e8449b25301def93cef2479e6f012619398 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-41 Malicious code in deep-search-exports-directory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05115bc38d2b7d646eb62c3541059ec47a535e35fad54010bcc53578fe1c7099 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shopify-netsuite-connector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 919f178c1babb3617b441fcbb027dc9d2cf016de6b83c433bcda9d481a350394 The OpenSSF Package Analysis project identified 'shopify-netsuite-connector' @ 99.999999.99990 npm as malicious. It is considered malicious...

MAL-2024-33 Malicious code in d5-es6-sass-boilerplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3090df994b516cfc30ee58cc5871282f61ebc4e378a73744fb779705e16a1a35 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Mandiant's Twitter Account Restored After Six-Hour Crypto Scam Hack

American cybersecurity firm and Google Cloud subsidiary Mandiant had its X formerly Twitter account compromised for more than six hours by an unknown attacker to propagate a cryptocurrency scam. As of writing, the account has been restored on the social media platform. It's currently not clear ho...

MAL-2024-23 Malicious code in snapfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 243c20cf789fbcfb3e3ba11a25b91aef2e8dfb1498fec76a215c1d04b1265343 The OpenSSF Package Analysis project identified 'snapfish' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...