Rapid7 MDR Supports AWS GuardDuty's New Attack Sequence Alerts

Co-authored by Yaron Kaplan and Gil Shamgar. AWS GuardDuty has introduced two powerful new alerts that enhance its threat detection capabilities: "Potential Credential Compromise" and "Potential S3 Data Compromise." These alerts go beyond traditional threat detection by focusing on attack...

Linux Distros Unpatched Vulnerability : CVE-2024-53042

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ipv4: iptunnel: Fix suspicious RCU usage warning in iptunnelinitflow There are code paths fr...

MAL-2025-2154 Malicious code in crypto-invoicer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ce45f4356717c34ab095570b175a0fa8bb5c8b2929e42e73d1997dc8fdec3a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1458 Malicious code in evoplay-spinential (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 715a8e278031d52f48cc59f78dfd93253ecc47b831d67be2854158f1e977f77b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nfnetlinkqueue: acquire rcureadlock in instanceDestroyrcu syzbot reported that nfreinject could be called without rcureadlock: WARNING: suspicious RCU usage 6.9.0-rc7-syzkaller-02060-g5c1672705a1a 0 Not tainted...

MAL-2025-1033 Malicious code in codat (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c8bc93392923ec301316878a16827003a0537d4e42cdf3daabf1dc2c16cfd5f Any computer that has this package installed or running should be considered...

MAL-2025-684 Malicious code in ruby-typeprof (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-659 Malicious code in flight_lab_control (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb5d324357d4041717da0277420513760dccbba17821ed9538aa033304d5f073 Any computer that has this package installed or running should be considered...

MAL-2025-558 Malicious code in meli-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e9c43699ec25184387ef69493ea9408036e114da2e1501a93d9cc74e38df909a The OpenSSF Package Analysis project identified 'meli-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-403 Malicious code in bookingcom-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74225c1da394fd78199ae89066b835fd86ed271ae51c1340505fe6eceb6e0263 The OpenSSF Package Analysis project identified 'bookingcom-parser' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

MAL-2025-368 Malicious code in amazon-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d8c0584799a75463d5c130aa96af2f9e2528a3059c901d9172db6f1aa601eadd The OpenSSF Package Analysis project identified 'amazon-admin' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in airbnb-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 302f06ee50a543ce401bd2fd81e36ce6491cfbcf2c0d900eb19e3768f4946098 The OpenSSF Package Analysis project identified 'airbnb-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-324 Malicious code in built-with-workers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f426ea9ad545f39f1e84cd26ee384b096d08c2b82f8b3554f97fc1ce85fac83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-133 Malicious code in tagmyphotosblog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 68718b8c6a0e78b22dbddaeb5a6be69dac34b17d2e20d9a2fdf08d6bbbf95a00 The OpenSSF Package Analysis project identified 'tagmyphotosblog' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

CISA: Unattended vs. Suspicious Item Poster

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Suspicious UAS Identification Postcard

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Suspicious UAS Identification Poster

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Unattended vs. Suspicious Item Postcard

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

MAL-2025-38 Malicious code in alchemy-web3-webpack-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0baf7db6925882a96eddaa00b4877f9147183d9b00a85fd69b02e5fe625f7ff7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11913 Malicious code in hardhat-deploy-others (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 85a3b67882ce27c0db4858f9509396a2a74b670426897002d8ccc9d29537c008 The OpenSSF Package Analysis project identified 'hardhat-deploy-others' @ 9.9.10 npm as malicious. It is considered malicious because: - The...