MAL-2023-1338 Malicious code in vote-chatbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19c7207472bfc0beece07f85734b2c399c40fc27dd1cfac03ca92492bbbc7cad The OpenSSF Package Analysis project identified 'vote-chatbot' @ 47.47.48 npm as malicious. It is considered malicious because: - The package...

Malicious code in vote-chatbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19c7207472bfc0beece07f85734b2c399c40fc27dd1cfac03ca92492bbbc7cad The OpenSSF Package Analysis project identified 'vote-chatbot' @ 47.47.48 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1336 Malicious code in videosdk-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis da3ca7587089ca66e194fccd2af2ed17b7a7de7db4445c0aedb8c72fe70d60e6 The OpenSSF Package Analysis project identified 'videosdk-web' @ 47.47.48 npm as malicious. It is considered malicious because: - The package...

Malicious code in videosdk-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis da3ca7587089ca66e194fccd2af2ed17b7a7de7db4445c0aedb8c72fe70d60e6 The OpenSSF Package Analysis project identified 'videosdk-web' @ 47.47.48 npm as malicious. It is considered malicious because: - The package...

MAL-2023-587 Malicious code in meetingsdk-sample-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b35b4caef11623ed6a19de27a6ca20f776482dc18bfe6fb11b3d852adb69eed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1321 Malicious code in thentiacloud-angularjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 080925c1a04cb601b6c5a204f7e8db92592ee52721272a7effa1eb5caf5207c8 The OpenSSF Package Analysis project identified 'thentiacloud-angularjs' @ 1.2.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-621 Malicious code in next-with-frontegg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 251ac37afbe61350facc80a00faa97821168ad425857f580f6fa33910fbd78eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1167 Malicious code in dreamotp1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d32ee7888ccbfab9c37e855e72a334e3fc63f65383d2e0ab391428f91ab61bf7 The OpenSSF Package Analysis project identified 'dreamotp1' @ 17.2.2 npm as malicious. It is considered malicious because: - The package...

CVE-2023-32622

creationtimestamp| type| source ---|---|--- 2023-06-30 12:15:08+00:00| seen| https://t.me/cibsecurity/65777...

MAL-2023-1288 Malicious code in schweppes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c6413b14065c0dae4dd031864f7a515ead037541f7f74a2907a2d554ebe4e7fe The OpenSSF Package Analysis project identified 'schweppes' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1219 Malicious code in jquery-overscroll (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 279b9014e86c11c82ac819b5e3bbbbbfc2868e3131b65bd941e60d08985cfbb0 The OpenSSF Package Analysis project identified 'jquery-overscroll' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in mesos-term (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ca86e4f7655ee05071ef73a17f239df8dcc483b932ef71d351cf47e8435376b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babar-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d799f6658deb9ee8f4827e581daad241c2e6c6a67633932b0247ca17fca4bf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-120 Malicious code in babar-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d799f6658deb9ee8f4827e581daad241c2e6c6a67633932b0247ca17fca4bf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1254 Malicious code in nowyouseereact (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9bbe52aafd9e6d0b2e3a3833f5648c9f6e2420d6bec841c56a6e5163478befce The OpenSSF Package Analysis project identified 'nowyouseereact' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1272 Malicious code in proteus-demo-app-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 14233d3bcebc4fe93545aca56d7d71ce365fcff59f4bf288232269a8e1669df6 The OpenSSF Package Analysis project identified 'proteus-demo-app-server' @ 10.0.1 npm as malicious. It is considered malicious because: - The...

New Cryptocurrency Mining Campaign Targets Linux Systems and IoT Devices

Internet-facing Linux systems and Internet of Things IoT devices are being targeted as part of a new campaign designed to illicitly mine cryptocurrency. "The threat actors behind the attack use a backdoor that deploys a wide array of tools and components such as rootkits and an IRC bot to steal...

MAL-2023-1123 Malicious code in bespin_server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ef9b9b100a28794dac4e539e7cc5f0b10522ca0838eeb49f5c78e02b754df4e2 The OpenSSF Package Analysis project identified 'bespinserver' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in bespin_server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ef9b9b100a28794dac4e539e7cc5f0b10522ca0838eeb49f5c78e02b754df4e2 The OpenSSF Package Analysis project identified 'bespinserver' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1346 Malicious code in workfront-typescript-definitions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8f6635deb487ad3ada4485d2a185c815895af90e8a87da476ce19f4c37ef0d1f The OpenSSF Package Analysis project identified 'workfront-typescript-definitions' @ 1.1.1 npm as malicious. It is considered malicious because:...