2432 matches found
“Follow me” to this fake crypto exchange to claim $500
A type of crypto scam that we reported about in 2024 has ported over to a new platform and changed tactics—a bit. Where the old scams mostly reached me on WhatsApp, the same group of scammers is now using Direct Messages on X. However, the same old trick of "accidentally" sending you login detail...
Palo Alto Networks Warns of Brute-Force Attempts Targeting PAN-OS GlobalProtect Gateways
Palo Alto Networks has revealed that it's observing brute-force login attempts against PAN-OS GlobalProtect gateways, days after threat hunters warned of a surge in suspicious login scanning activity targeting its appliances. "Our teams are observing evidence of activity consistent with...
MAL-2025-2734 Malicious code in dmpconnectjsapp-base (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d21050916c0e5222db92b8c6056e3a60fbf54f55cebefb5509a15453c20d68b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-21876
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix suspicious RCU usage Commit "iommu/vt-d: Allocate DMAR fault interrupts locally" moved the call to enabledrhdfaulthandling to a code path that does not hold any lock while traversing the drhd list. Fix it by...
MAL-2025-2623 Malicious code in corehome (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 835efaf181707862582cf58938ea26bb25e18a1d228269a42b58f12d1c250ca7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Rapid7 MDR Supports AWS GuardDuty's New Attack Sequence Alerts
Co-authored by Yaron Kaplan and Gil Shamgar. AWS GuardDuty has introduced two powerful new alerts that enhance its threat detection capabilities: "Potential Credential Compromise" and "Potential S3 Data Compromise." These alerts go beyond traditional threat detection by focusing on attack...
Linux Distros Unpatched Vulnerability : CVE-2024-53042
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ipv4: iptunnel: Fix suspicious RCU usage warning in iptunnelinitflow There are code paths fr...
MAL-2025-2154 Malicious code in crypto-invoicer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ce45f4356717c34ab095570b175a0fa8bb5c8b2929e42e73d1997dc8fdec3a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-1458 Malicious code in evoplay-spinential (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 715a8e278031d52f48cc59f78dfd93253ecc47b831d67be2854158f1e977f77b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-1033 Malicious code in codat (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c8bc93392923ec301316878a16827003a0537d4e42cdf3daabf1dc2c16cfd5f Any computer that has this package installed or running should be considered...
MAL-2025-659 Malicious code in flight_lab_control (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb5d324357d4041717da0277420513760dccbba17821ed9538aa033304d5f073 Any computer that has this package installed or running should be considered...
MAL-2025-684 Malicious code in ruby-typeprof (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-558 Malicious code in meli-model (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e9c43699ec25184387ef69493ea9408036e114da2e1501a93d9cc74e38df909a The OpenSSF Package Analysis project identified 'meli-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
MAL-2025-403 Malicious code in bookingcom-parser (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74225c1da394fd78199ae89066b835fd86ed271ae51c1340505fe6eceb6e0263 The OpenSSF Package Analysis project identified 'bookingcom-parser' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...
MAL-2025-368 Malicious code in amazon-admin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d8c0584799a75463d5c130aa96af2f9e2528a3059c901d9172db6f1aa601eadd The OpenSSF Package Analysis project identified 'amazon-admin' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
Malicious code in airbnb-analytics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 302f06ee50a543ce401bd2fd81e36ce6491cfbcf2c0d900eb19e3768f4946098 The OpenSSF Package Analysis project identified 'airbnb-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
MAL-2025-324 Malicious code in built-with-workers (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f426ea9ad545f39f1e84cd26ee384b096d08c2b82f8b3554f97fc1ce85fac83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-133 Malicious code in tagmyphotosblog (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 68718b8c6a0e78b22dbddaeb5a6be69dac34b17d2e20d9a2fdf08d6bbbf95a00 The OpenSSF Package Analysis project identified 'tagmyphotosblog' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
