Malicious code in one-venafi-local-store-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6368f9d9802e4cee726a0e6cb5adae6d8a31d8ce4cea0d6d515fcb9077d2f220 The OpenSSF Package Analysis project identified 'one-venafi-local-store-manager' @ 1.0.8 npm as malicious. It is considered malicious because: -...

MAL-2025-3031 Malicious code in one-venafi-local-store-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6368f9d9802e4cee726a0e6cb5adae6d8a31d8ce4cea0d6d515fcb9077d2f220 The OpenSSF Package Analysis project identified 'one-venafi-local-store-manager' @ 1.0.8 npm as malicious. It is considered malicious because: -...

Pacbot - Platform For Continuous Compliance Monitoring, Compliance Reporting And Security Automation For The Cloud

Policy as Code Bot PacBot is a platform for continuous compliance monitoring, compliance reporting and security automation for the cloud. In PacBot, security and compliance policies are implemented as code. All resources discovered by PacBot are evaluated against these policies to gauge policy...

Google Removing SHA-1 Support in Chrome 56

The home stretch for SHA-1 deprecation is in full effect with Google on Wednesday announcing its final deprecation deadlines for the Chrome browser, and a cryptographic services provider warning that there’s still a long way to go to get sites off SHA-1 certificates. Google said it will remove it...

Multiple Unauthorized Access Vulnerabilities in Venafi Trust Protection Platform

Venafi Trust Protection Platform is Venafi's solution for remediating key or certificate vulnerabilities and restoring trust online. The solution supports automatic correction of key and certificate threats and provides comprehensive logging and monitoring capabilities, among others. Venafi Trust...

Venafi to Launch Certificate Transparency Log

Three weeks after the first non-Google public log for Certificate Transparency was launched by DigiCert, officials at Venafi said that the company plans to debut its own public CT log. On Jan. 1 Google approved the use of DigiCert’s log, the first CT log that is independent and not operated by...