Malicious Package

Overview lexicalutils is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

CVE-2023-31845

creationtimestamp| type| source ---|---|--- 2023-05-15 16:43:19+00:00| seen| https://t.me/cibsecurity/64126 2025-01-23 21:03:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2822...

CVE-2023-2698

creationtimestamp| type| source ---|---|--- 2023-05-14 23:49:30+00:00| seen| https://t.me/cibsecurity/64077...

CVE-2023-2283

creationtimestamp| type| source ---|---|--- 2023-05-11 18:05:50+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8278 2023-06-08 10:11:39+00:00| published-proof-of-concept| https://t.me/proxybar/1568 2023-06-08 22:47:06+00:00| published-proof-of-concept|...

CVE-2023-27385

creationtimestamp| type| source ---|---|--- 2023-05-10 12:20:20+00:00| seen| https://t.me/cibsecurity/63722...

CVE-2023-29325

creationtimestamp| type| source ---|---|--- 2023-05-09 22:44:55+00:00| seen| https://t.me/cibsecurity/63678 2023-05-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1023 2023-05-10 13:00:06+00:00| seen| https://t.me/truesecator/4360 2026-07-26 02:02:26+00:00| seen|...

CVE-2023-22813

creationtimestamp| type| source ---|---|--- 2023-05-09 02:37:55+00:00| seen| https://t.me/cibsecurity/63528...

CVE-2023-27935

creationtimestamp| type| source ---|---|--- 2023-05-09 00:50:56+00:00| seen| https://t.me/cibsecurity/63512...

Malicious code in sagemakertransformers (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c11f5b4aed6b109392ec1e8837e14a1948f90d65986a7555511b0dd2cb2f479 The OpenSSF Package Analysis project identified 'sagemakertransformers' @ 0.0.3 pypi as malicious. It is considered malicious because: - The...

CVE-2023-25458

creationtimestamp| type| source ---|---|--- 2023-05-05 00:37:17+00:00| seen| https://t.me/cibsecurity/63328...

Malicious code in tzinfo-i18n (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 80d76ff3efd3a37e90d86c31f34ad01633504eb17709869928335523c66a2a55 The OpenSSF Package Analysis project identified 'tzinfo-i18n' @ 0.1.0 rubygems as malicious. It is considered malicious because: - The package...

CVE-2023-30177

creationtimestamp| type| source ---|---|--- 2023-04-25 22:25:07+00:00| seen| https://t.me/cibsecurity/62824...

CVE-2023-31056

creationtimestamp| type| source ---|---|--- 2023-04-24 07:14:04+00:00| seen| https://t.me/cibsecurity/62678...

CVE-2023-2205

creationtimestamp| type| source ---|---|--- 2023-04-21 12:37:57+00:00| seen| https://t.me/cibsecurity/62573...

CVE-2023-2112

creationtimestamp| type| source ---|---|--- 2023-04-20 12:35:42+00:00| seen| https://t.me/cibsecurity/62504...

MAL-2023-703 Malicious code in provisioner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51718d5d2a9693c9cad48841157ec3ac3d6bb311b1849970dbca255db427043d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Clock In Portal <= 2.1 - Designation Deletion via CSRF

The plugin does not have CSRF check when deleting designations, which could allow attackers to make logged in admins delete arbitrary designations via a CSRF attack Make a logged in admin open a page with the code below, this will make them delete the Designation with ID 2...

CVE-2023-2034

creationtimestamp| type| source ---|---|--- 2023-04-14 07:30:35+00:00| seen| https://t.me/cibsecurity/62102...

CVE-2022-48468

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

CVE-2023-30630

creationtimestamp| type| source ---|---|--- 2023-04-13 20:25:20+00:00| seen| https://t.me/cibsecurity/62074 2025-03-04 21:35:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6439 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...