Tag: open-source – Securitricks

216.73.216.6

Tag: open-source

Attack reports, vulnerabilities, indicators and intrusion sets linked to open-source.

Attack reports (18)

Copycat hits another npm package

AlienVault Confidence 100 19 MITREs 1 Malware 3 IOCs 3 Observables
AI Infrastructure Supply Chain Poisoning Alert

AlienVault Confidence 100 16 MITREs 4 IOCs 4 Observables 1 APT
An AI-Powered Bot Actively Exploiting GitHub Actions - Microsoft, DataDog, and CNCF …

8 MITREs 4 Observables 1 APT
The Curious Case of the Triton Malware Fork

7 MITREs 1 Malware 3 Observables
Bootstrap script exposes PyPI to domain takeover attacks

1 CVE 7 MITREs 2 Observables
Self-replicating Shai-hulud worm spreads token stealing malware on npm

1 Malware
Yurei the New Ransomware Group on the Scene

8 MITREs 3 Malwares 5 Observables 1 APT
AdaptixC2: A New Open-Source Framework Leveraged in Real-World Attacks

18 MITREs
Loophole allows threat actors to claim VS Code extension names

1 MITRE
GhostContainer backdoor for Exchange servers

1 Observable
The Solidity Language open-source package was used in a $500,000 crypto heist

9 MITREs
Threat actor Banana Squad exploits GitHub repos in new campaign

200 Observables 1 APT

Previous

1–12 of 18