Windows BITS Jobs Persistence Scanner

This is a Windows BITS Job auditing tool that scans all Background Intelligent Transfer Service BITS tasks using bitsadmin, then analyzes them for suspicious behavior such as executable downloads, command execution cmd.exe, powershell, and remote URLs. It classifies jobs as normal or suspicious a...

MAL-2024-8996 Malicious code in @mallutrojan005/coveralls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d735ee63af3d7bfaf8e5af37b0bd6a8034f4283ad069c65241a1c3f6c8ea7100 The OpenSSF Package Analysis project identified '@mallutrojan005/coveralls' @ 2.1.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-8934 Malicious code in @the-df-company/commod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5ef49313b5c6faeeb4fe243f85058ce379b31887177f5dbe49a4dac3252fe7f0 The OpenSSF Package Analysis project identified '@the-df-company/commod' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-8708 Malicious code in @google-research/retvecjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f7a64d316c75e0e53a3a525a50d591725648d0064b5f1d5c622b3c94ef5aaf30 The OpenSSF Package Analysis project identified '@google-research/retvecjs' @ 100.999.99 npm as malicious. It is considered malicious because: -...

MAL-2024-1313 Malicious code in not-exist-lykos-poc2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9fdf307a333300d88cdb5031c5f135a2fe51e2a01d4db763c2d1457111ce9fe4 The OpenSSF Package Analysis project identified 'not-exist-lykos-poc2' @ 66.6.9 npm as malicious. It is considered malicious because: - The...

MAL-2023-1501 Malicious code in wpi-xmldom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5ca72dd827e914309265980a13573c7017021ad948c7fb748b36707a9aa85e47 The OpenSSF Package Analysis project identified 'wpi-xmldom' @ 2.2.2 npm as malicious. It is considered malicious because: - The package...