MAL-2023-5805 Malicious code in pywcpu (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 846560098d533278909bea42f217a77e90ea2770eee8bca3bd279c142d7974cd EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in grandcraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 494c45ad57b303c0e6816350ff9df882844bab88614591956dfbaa15dcb43d5e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3641 Malicious code in grandcraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 494c45ad57b303c0e6816350ff9df882844bab88614591956dfbaa15dcb43d5e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7781 Malicious code in urlcraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 97b5a119a09ef624c0d520c0f3eb50281d6c24f7fc973fbafed667175efabc67 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4861 Malicious code in pipgame (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5631672e23bc773b457ef88c7096b364cf9f5c0139fcd4e8c03fa5a1e57fc719 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libmine (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 82b3edf3999e9bb8e2ff860207d1523783b7d029425f822a2ece184b91119ba7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2479 Malicious code in adcpu (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx aa5dc890da9fcf136c6f31ef6d26bffd12f4dc4e8d57073af42cc29dcadc5dc1 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3585 Malicious code in gamehttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1ab0ef0f70fcdd15fd68bbd5fdade521db6eccaaf2b0d603933448150c0a0f79 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in httppip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2936732efd565e943184d6252a6056929f4de91644279cfd696d0d0e10ea4ade EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3706 Malicious code in guivm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx fc32794ad312aabedb56bdf292918a233490e4e8fabd0d5f868a81ebfd2cac6a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-978 Malicious code in xsstesttttttttt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc8748b83babc4682dcf2d5828d03fe1d54b31a1cce16fa636448eb65f310eb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-537 Malicious code in jquery-mask (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60c2e86401517688fc0bdbd68e989cce56834a9c11090e0a27fd0e0b5cdf9ca2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-435 Malicious code in fe-core-components-vuejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d60e569c72a226b7f460fd4ee1792523d0c53a9206b27aef9a6d2774378754ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-111 Malicious code in attribution-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5afc91a8d62e415d605efc5e9b132faa79e4d67b5aa087375dff9b544b70715c Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

SUSE CVE-2017-5397

The cache directory on the local file system is set to be world writable. Firefox defaults to extracting libraries from this cache. This allows for the possibility of an installed malicious application or tools with write access to the file system to replace files used by Firefox with their own...

MAL-2023-2248 Malicious code in simlpejson (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4cfde2df33b3ec54e8efeb6c165ccb068cb68ed0042691fdce6ee98dbb5f8003 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1677 Malicious code in ccx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4b65e79327daa2cc5ec5b36d4f94dde43607d8cb595f276122659ef69d86a25a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-65 Malicious code in @superbet-group/web.lib.vue-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0177c1a71b6ddf84d3b320b15eb180edf94406c0f6a4f07ad0b4ca33fcbb52fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-66 Malicious code in @superbet-group/web.types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3a0aaf7c7b5a8aedf6bc88f0778aee51462546adb577e4116a18d36d41462d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-34 Malicious code in @chegg/wtai-upload-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed3e4233e6f2d188d7f2bab940bf8574017cf73a97b440daddc7f4e3176075a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...