MAL-2023-1408 Malicious code in service-etl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 851b9d051bac830771e87d8acb0857e1bb20dcf8f3fad2af78ca8785cda4d668 The OpenSSF Package Analysis project identified 'service-etl' @ 11.11.3 pypi as malicious. It is considered malicious because: - The package...

Malicious code in dmp-suite (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 519dd07a618b2ba0671d86ef8fa2155f33aeaacdeed9a41d7f2e5257fb737aac The OpenSSF Package Analysis project identified 'dmp-suite' @ 11.11.3 pypi as malicious. It is considered malicious because: - The package...

Malicious code in hpackeyboard-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1bbf45e5eca05a512edae59fd2e45e1a8b38f2c4a081a08be9646428aa41cc52 The OpenSSF Package Analysis project identified 'hpackeyboard-core' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1079 Malicious code in @expressions/excel-functions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0f285f6202227757b1ae10391ea069ae841e5b19a58529e5ce7b0f0a37e48c91 The OpenSSF Package Analysis project identified '@expressions/excel-functions' @ 3.0.0 npm as malicious. It is considered malicious because: - T...

Malicious code in example-package-taxi-etl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cc9af8fd35e3ce951b8d314b087c20afbd1ed1eeb3ff9441b0ea5d5ac5576e5a The OpenSSF Package Analysis project identified 'example-package-taxi-etl' @ 0.0.3 pypi as malicious. It is considered malicious because: - The...

MAL-2023-1279 Malicious code in react-div-100vh-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9b9718c1f5170d44298bb0ef93d114e752ea42231e924e5c895add2f21e3c18a The OpenSSF Package Analysis project identified 'react-div-100vh-test' @ 9.0.0 npm as malicious. It is considered malicious because: - The packa...

Malicious code in react-div-100vh-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9b9718c1f5170d44298bb0ef93d114e752ea42231e924e5c895add2f21e3c18a The OpenSSF Package Analysis project identified 'react-div-100vh-test' @ 9.0.0 npm as malicious. It is considered malicious because: - The packa...

MAL-2023-7 Malicious code in ssh-compute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 240dd96c86fea32d5f03426ea8f8069aa60e8cccfe1f5d0a53812aa6cf7fa311 The OpenSSF Package Analysis project identified 'ssh-compute' @ 0.1.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in ssh-compute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 240dd96c86fea32d5f03426ea8f8069aa60e8cccfe1f5d0a53812aa6cf7fa311 The OpenSSF Package Analysis project identified 'ssh-compute' @ 0.1.9 npm as malicious. It is considered malicious because: - The package...

MAL-2023-12 Malicious code in tzinfo-i18n (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 80d76ff3efd3a37e90d86c31f34ad01633504eb17709869928335523c66a2a55 The OpenSSF Package Analysis project identified 'tzinfo-i18n' @ 0.1.0 rubygems as malicious. It is considered malicious because: - The package...

Malicious code in loveapple (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93f0fed5927aa024ef89366775ca7f11d1f48b1d2f4d547780f38f6984b9c5f0 The OpenSSF Package Analysis project identified 'loveapple' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1230 Malicious code in loveapple (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93f0fed5927aa024ef89366775ca7f11d1f48b1d2f4d547780f38f6984b9c5f0 The OpenSSF Package Analysis project identified 'loveapple' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1421 Malicious code in tucan-x (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 69bdf61be1b4579f5016adcacef468a263b798b77b87d354e90900d4cb4474b8 The OpenSSF Package Analysis project identified 'tucan-x' @ 0.0.2 pypi as malicious. It is considered malicious because: - The package...

Malicious code in w_sox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dba7dc82566307dfb355c21af9d35d4234490e034f4c80280a555a8a7ce5ef9e The OpenSSF Package Analysis project identified 'wsox' @ 7.1.2 npm as malicious. It is considered malicious because: - The package communicates...

MAL-2023-1424 Malicious code in fluent-plugin-enhance-k8s-metadata (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 537d9d482d3e99b2757022edbff8c81e9a9bd9bf73f272f10634d355c813e635 The OpenSSF Package Analysis project identified 'fluent-plugin-enhance-k8s-metadata' @ 5.0.1 rubygems as malicious. It is considered malicious...

Malicious code in update.electronjs.org (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 570da49a43c941cec1292b434882e33fa9b0d622894934efe87b8cf494184da6 The OpenSSF Package Analysis project identified 'update.electronjs.org' @ 99.9.9 npm as malicious. It is considered malicious because: - The...

Threat actors strive to cause Tax Day headaches

Threat actors often take advantage of current events and major news headlines to align attacks and leverage social engineering when people could be more likely to be distracted or misled. Tax season is particularly appealing to threat actors because not only are people busy and under stress, but ...

Backdoored 3CXDesktopApp Installer Used in Active Threat Campaign

Emergent threats evolve quickly. We will update this blog with new information as it comes to light and we are able to verify it. Erick Galinkin, Ted Samuels, Zach Dayton, Eoin Miller, Caitlin Condon, Stephen Fewer, Spencer McIntyre, and Christiaan Beek all contributed to this blog. On Wednesday,...

MacOSThreatTrack - Bash Tool Used For Proactive Detection Of Malicious Activity On macOS Systems

The tool is being tested in the beta phase, and it only gathers MacOS system information at this time. The code is poorly organized and requires significant improvements. Description Bash tool used for proactive detection of malicious activity on macOS systems. I was inspired by Venator-Swift and...

MAL-2023-523 Malicious code in ing-feat-chat-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 835a1fb10ee1658d2e09e94628e45218fe3918071de4d8ab99ac557a92de67b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...