Malicious code in minepost (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 76bee5f785c0dcbc6f491fd4a0e55026a0642ca1239e2490a228e4cd052f7082 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in getload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d2a573a5e8ff7971dff21ea43685c4cc29fabd013068fd1a0756f09dc75b47dd EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in ramhttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4e7207c280282283056a7870e8a62ee41c6c9ab9e346852df5843af41b4155d2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in infogame (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx aab53f9496c25c28131ff274905cd7433e72bbaf9e3aa82dfabcf210ba837f0e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in infopost (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 50286e0443c5cda90c4b2e70923670db18925f2f02ced361eb21d5961a7129f2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in supertool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx aabb488be4cf8a3a181f436da61ed2e13d62c860715e99b7a30b439bd09f483d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in revm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e2335bbec77d75b58effd7e599d6d9e21cf4a6dbe0aedeb01125eb05809fc63d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in pywload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 577372f99be193e6b1f679004ca5c54a8494f880021fa0e33e77bbfca7f92c81 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in vmload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e595af66e5265ff034f5bdfcd80cad125094a98ba823279b8b3e67464064dd4b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in mineinfo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f3095338ccde51089f05f0888c951acc6c6878132fe39a2604110e18198891e5 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in urlvm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx bf9fc4bbaf53c30bb4c658a113ba60e9483552a4cc7e420609842cc637259ee5 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in vminfo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 58ed865bdfa9990a893190e50b32a0f0a52443e8b607534294ead6de8db514c4 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-8001 Malicious code in @pagseguro/ps-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 54f4ead0383d94bf30830e7ec4fcce7d84126a414c4fef7f4c55e2ce11ba9b34 Malicious packages campaign since 2021 targeting developers, steals source code and secrets...

MAL-2023-7996 Malicious code in @pagseguro/nest (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b16a70a89161283b99538bb25fdbaecc235a75a73c7a471c98ad831fc08a7cdf Malicious packages campaign since 2021 targeting developers, steals source code and secrets...

MAL-2023-8004 Malicious code in @pagseguro/ps-validations (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2beafdb84bf2a244e2513a740eba0bbd433fbe300440bb3ac0efc51a55e7f77e Malicious packages campaign since 2021 targeting developers, steals source code and secrets...

Malicious Package

Overview @roots/bud is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

SUSE CVE-2021-21374

Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS without full verification of the SSL/TLS certificate due to the default setting of httpClient. An attacker able to...

Malicious code in tkkcalendar (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4dfe6635d443d00fa1ee3c506a1d4f06835a5875737720dd724a4475e7010359 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in tkcalenddar (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 325b2ed0fe011dd5d2f571984f69db6e439c5c2647752eabd2b0cb7848e722da Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in tkcalendra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx dd65f2c94fec35121de0dd1448e48824d9236968ead1512d8474404e0d4a1806 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...