Malicious code in cosma-ui-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 49388262dd0b3d40b1f426a488f94937d409f2ce2053702f81a099fa8ed3b3c2 The OpenSSF Package Analysis project identified 'cosma-ui-icons' @ 9999.999.3 npm as malicious. It is considered malicious because: - The packag...

Malicious code in @ing-caf/cdn-proxy-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 24ccbe0b13f81d2fe8d285bab144167d33f7b4e167833ebf615411db6d318eb6 The OpenSSF Package Analysis project identified '@ing-caf/cdn-proxy-plugin' @ 200.0.2 npm as malicious. It is considered malicious because: - Th...

GHSA-8J42-PCFM-3467 SQL injection in litellm

A blind SQL injection vulnerability exists in the berriai/litellm application, specifically within the '/team/update' process. The vulnerability arises due to the improper handling of the 'userid' parameter in the raw SQL query used for deleting users. An attacker can exploit this vulnerability b...

Malicious code in pentesters987abc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c42f65f70dff1af7f6a44a0622052e7a0f92113d52a9eb1258c158f1ff2ad27d The OpenSSF Package Analysis project identified 'pentesters987abc' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

RedTail Crypto-Mining Malware Exploiting Palo Alto Networks Firewall Vulnerability

The threat actors behind the RedTail cryptocurrency mining malware have added a recently disclosed security flaw impacting Palo Alto Networks firewalls to its exploit arsenal. The addition of the PAN-OS vulnerability to its toolkit has been complemented by updates to the malware, which now...

Malicious code in frontend-datatable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3c7c2e13212e99fdaaa2039f7c837f80d08d0a6510e315a3db617cf16f49b477 The OpenSSF Package Analysis project identified 'frontend-datatable' @ 1.2.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in by-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbe17032deb287c69fb57c7e240590cb829a046c49e904b65d01686694636d5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in elk-uikit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aaece47ca73a2646b0cb728b7816026ec3135f48e18054950dce89f8bf9073b0 The OpenSSF Package Analysis project identified 'elk-uikit' @ 99.99.1 npm as malicious. It is considered malicious because: - The package execut...

Malicious code in not-exist-lykos-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7a4ae62646ef95a3157dcd61e8c0f58a25bec2c826d45f514c6e7bffde0126d4 The OpenSSF Package Analysis project identified 'not-exist-lykos-poc' @ 66.6.6 npm as malicious. It is considered malicious because: - The packa...

CVE-2024-1520 OS Command Injection in parisneo/lollms-webui

An OS Command Injection vulnerability exists in the '/opencodefolder' endpoint of the parisneo/lollms-webui application, due to improper validation of user-supplied input in the 'discussionid' parameter. Attackers can exploit this vulnerability by injecting malicious OS commands, leading to...

Malicious code in nespresso-bi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ecb1d1aad101d1cf5bdd8986e77fa20c75f039412cec1ebe03442f8fec9f939 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in qlik-sense-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 65fd03500a82dc6ac997cdeb7275cc6c67cae34d382b293886407c96166bc357 The OpenSSF Package Analysis project identified 'qlik-sense-dev' @ 5.9.991 npm as malicious. It is considered malicious because: - The package...

Malicious code in soundcloud-songs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1a7a5bdeca432ac351a71a0caac1e58d2f4d31d54fcf357f657e84d8f201f16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tchap-translations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ca575a89e5cfe2c388f248f9084e97b9cc385753de105d2ada5dc6323d1de06f The OpenSSF Package Analysis project identified 'tchap-translations' @ 9.9.10 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-1136 Malicious code in region-selector-content (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ff0393e9f3a6a405065088df076729bb9436bdad64329c0f3eb1dfd8a5ad6638 The OpenSSF Package Analysis project identified 'region-selector-content' @ 99.3.0 npm as malicious. It is considered malicious because: - The...

Malicious code in region-selector-content (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ff0393e9f3a6a405065088df076729bb9436bdad64329c0f3eb1dfd8a5ad6638 The OpenSSF Package Analysis project identified 'region-selector-content' @ 99.3.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-1110 Malicious code in abcotv-constants (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aecde97eb6bd30d0ab5c8787d1bd2f6d5fe38f5078d015135b8e267e5558b89e The OpenSSF Package Analysis project identified 'abcotv-constants' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in lyft-settings (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11c2890ec2321b818585ae36669c7c7b9b8b88d0b0b4c7b47679988a9908c569 The OpenSSF Package Analysis project identified 'lyft-settings' @ 5.9.1 pypi as malicious. It is considered malicious because: - The package...

RedCurl Cybercrime Group Abuses Windows PCA Tool for Corporate Espionage

The Russian-speaking cybercrime group called RedCurl is leveraging a legitimate Microsoft Windows component called the Program Compatibility Assistant PCA to execute malicious commands. "The Program Compatibility Assistant Service pcalua.exe is a Windows service designed to identify and address...

Malicious code in edgenuity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15e4c93cf6c84b166ccde43c18dfbd4c3095f530bca0139dc5086f17c244adf2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...