Malicious Package

Overview staff-api is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

CVE-2023-20932

creationtimestamp| type| source ---|---|--- 2023-02-28 20:27:41+00:00| seen| https://t.me/cibsecurity/59116 2025-03-21 16:19:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8362...

CVE-2023-20857

VMware Workspace ONE Content contains a passcode bypass vulnerability. A malicious actor, with access to a users rooted device, may be able to bypass the VMware Workspace ONE Content passcode...

Malicious code in tpproofstringnvidia (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0cc5fd5667b4ff61cf3e3f64a62776645648a36541d82ed4326d8c73c9113e1d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7126 Malicious code in tphydramask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx fd39d01ca21386f88530bcf6c562d7e9e488f8f9481e2bacc7b86d20c90fd4af EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6383 Malicious code in selfosintvmcraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6d86f77f6b399c5615be81ca8a0232342ae384615464c86b8cf66e47a311a01e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

CVE-2015-10083

creationtimestamp| type| source ---|---|--- 2023-02-21 18:16:56+00:00| seen| https://t.me/cibsecurity/58614...

Malicious Package

Overview eslint-config-distribution is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if thi...

Malicious Package

Overview eslint-plugin-dropbox-sign is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if thi...

CVE-2022-48319

creationtimestamp| type| source ---|---|--- 2023-02-20 20:15:57+00:00| seen| https://t.me/cibsecurity/58533...

CVE-2023-24998

creationtimestamp| type| source ---|---|--- 2023-02-20 18:15:54+00:00| seen| https://t.me/cibsecurity/58524 2023-02-24 15:04:36+00:00| seen| https://t.me/breachdetector/207052 2023-02-24 21:27:53+00:00| seen| Telegram/Lw7u-Xk6xSteuBiwyNzWX2LNGzfySroFN8WyCw6GBv2i6to 2023-03-11 00:27:28+00:00| seen...

CVE-2023-25656

creationtimestamp| type| source ---|---|--- 2023-02-20 18:15:54+00:00| seen| https://t.me/cibsecurity/58523...

CVE-2022-26512

creationtimestamp| type| source ---|---|--- 2023-02-16 22:26:51+00:00| seen| https://t.me/cibsecurity/58377...

Malicious Package

Overview bemhint-plugins is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...

CVE-2023-25565

creationtimestamp| type| source ---|---|--- 2023-02-14 20:35:55+00:00| seen| https://t.me/cibsecurity/58131...

CVE-2023-25149

creationtimestamp| type| source ---|---|--- 2023-02-14 16:49:00+00:00| seen| https://t.me/cibsecurity/58103 2026-07-26 02:02:30+00:00| seen| https://t.me/EchelonEyes/1200 2026-07-27 00:01:06+00:00| seen| https://t.me/EchelonEyes/1200 2026-07-28 01:00:05+00:00| published-proof-of-concept|...

CVE-2023-25065

creationtimestamp| type| source ---|---|--- 2023-02-14 14:51:38+00:00| seen| https://t.me/cibsecurity/58098...

CVE-2022-48323

Sunlogin Sunflower Simplified (Sunflower Simple/Personal) 1.0.1.43315 is vulnerable to a path traversal that enables remote code execution. A remote, unauthenticated attacker can exploit HTTP requests (e.g., /check?cmd=ping../) to run arbitrary programs on the victim host. The Nuclei template con...

MAL-2023-2364 Malicious code in webocket-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 26e521d49ad2ee97e54aee50e42c9325365fe149f2aa67d5b49516743ea19381 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2368 Malicious code in webscket-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6c8716d958d7a19a4e59c03eac34c6d8338493b88fb15fd0440025fcbce59c34 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...