201 matches found
MAL-2025-33234 Malicious code in sigma-scale-fire-dog-decode (npm)
The package sigma-scale-fire-dog-decode was found to contain malicious code...
MAL-2025-19794 Malicious code in error-float-report-resolve-sigma (npm)
The package error-float-report-resolve-sigma was found to contain malicious code...
MAL-2025-34105 Malicious code in stub-cat-good-quick-sigma (npm)
The package stub-cat-good-quick-sigma was found to contain malicious code...
MAL-2025-35130 Malicious code in test-mlw2-cotts-pyres-sigma-quids (npm)
The package test-mlw2-cotts-pyres-sigma-quids was found to contain malicious code...
MAL-2025-32672 Malicious code in sanitize-encode-interpret-sigma-water (npm)
The package sanitize-encode-interpret-sigma-water was found to contain malicious code...
MAL-2025-33233 Malicious code in sigma-reject-mock-try-simulate (npm)
The package sigma-reject-mock-try-simulate was found to contain malicious code...
MAL-2025-23273 Malicious code in interface-sigma-rain-pi-mu (npm)
The package interface-sigma-rain-pi-mu was found to contain malicious code...
MAL-2025-27876 Malicious code in nu-deploy-sigma-mu-grid (npm)
The package nu-deploy-sigma-mu-grid was found to contain malicious code...
MAL-2025-19678 Malicious code in enum-sigma-test-double-container (npm)
The package enum-sigma-test-double-container was found to contain malicious code...
MAL-2025-20567 Malicious code in final-sigma-warn-emulate-big (npm)
The package final-sigma-warn-emulate-big was found to contain malicious code...
MAL-2025-18238 Malicious code in delta-object-sigma-file-star (npm)
The package delta-object-sigma-file-star was found to contain malicious code...
MAL-2025-34777 Malicious code in test-mlw1-cotts-pyres-sigma-quids (npm)
The package test-mlw1-cotts-pyres-sigma-quids was found to contain malicious code...
CVE-2021-35522
A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, and MA VP MD devices before 4.9.7 allows remote attackers to achieve code execution, denial of services, and information disclosure via TCP/IP packets...
CVE-2020-12040
Sigma Spectrum Infusion System v's6.x model 35700BAX and Baxter Spectrum Infusion System Versions 8.x model 35700BAX2 at the application layer uses an unauthenticated clear-text communication channel to send and receive system status and operational data. This could allow an attacker that has...
Evaluating the Robustness of Adversarial Defenses in Malware Detection Systems
Machine learning is a key tool for Android malware detection, effectively identifying malicious patterns in apps. However, ML-based detectors are vulnerable to evasion attacks, where small, crafted changes bypass detection. Despite progress in adversarial defenses, the lack of comprehensive...
Malicious code in sigma-payment (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cae3e39d6adad5c19ce159910927557c2e98660ac824828e0eb22a0dce296ae Any computer that has this package install...
MAL-2025-723 Malicious code in sigma-payment (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cae3e39d6adad5c19ce159910927557c2e98660ac824828e0eb22a0dce296ae Any computer that has this package install...
synacktiv-rules
synacktiv-rules Public repository of Sigma and YARA/YARA-X ru...
Malicious code in sigma-errors (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3261ce8608a1d5df2dc6eea25790460c5c3acc3ff03c223d4ece32c799bde4e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8826 Malicious code in sigma-errors (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3261ce8608a1d5df2dc6eea25790460c5c3acc3ff03c223d4ece32c799bde4e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...