Malicious code in breakout-chat-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d8e13b6a2b5cc5f8e33630acfd72933e8c38a79591e01e7d2104e695661e9c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1678 Malicious code in breakout-chat-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d8e13b6a2b5cc5f8e33630acfd72933e8c38a79591e01e7d2104e695661e9c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-communication-chat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2ca36298e271f3c43a5dc89eed02ef3fbdb5dc20bf3898a6b4bc0e8cba8dd05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1298 Malicious code in azure-communication-chat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2ca36298e271f3c43a5dc89eed02ef3fbdb5dc20bf3898a6b4bc0e8cba8dd05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dgtls/allianz-chat-window (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8abdec13c4b20352e0089439f69c26d650bab72205190b1710aba158da27402 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6690 Malicious code in twilio-chat-console-webapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d43b58f29b1c20f3fa4c8d6c56e87e0fe9432726d8b380b35b38b1f5deda3b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in twilio-chat-console-webapp.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e49ceaa7ff098d3318e69bf952690e21a038f0172d1d88c26b9c9882d9607f50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in twilio-chat-console-webapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d43b58f29b1c20f3fa4c8d6c56e87e0fe9432726d8b380b35b38b1f5deda3b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in communication-chat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b14bd38b0c6e2269d9b61b3e39c5f5c341309afdf66d8350d8baa41785d99df1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2133 Malicious code in communication-chat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b14bd38b0c6e2269d9b61b3e39c5f5c341309afdf66d8350d8baa41785d99df1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-communication-chat-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a41ee4a390154081a997335799ae8718683074f12cd09137981cc79203c6cb9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1300 Malicious code in azure-communication-chat-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc2fa44f3dac91a94d4ca95f9bc4c6f65554fe4cf95f81c2c61ba6a9e1463654 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-communication-chat-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc2fa44f3dac91a94d4ca95f9bc4c6f65554fe4cf95f81c2c61ba6a9e1463654 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1299 Malicious code in azure-communication-chat-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a41ee4a390154081a997335799ae8718683074f12cd09137981cc79203c6cb9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chat-web-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adbb94fdf28fcde1a3452a2f9dfb7b4c0dc46bdb48a3858902d42f8e03e7293a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1890 Malicious code in chat-web-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adbb94fdf28fcde1a3452a2f9dfb7b4c0dc46bdb48a3858902d42f8e03e7293a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

A week in security (June 6 – June 12)

Last week on Malwarebytes Labs: FBI warns of scammers soliciting donations for Ukraine Microsoft autopatch is here…but can you use it? Prometheus ransomwares flaws inspired researchers to try to build a near-universal decryption tool Rotten apples banned from App store Hackers can take over...

Awful 4chan chat bot spouts racial slurs and antisemitic abuse

“A robot may not injure a human being or, through inaction, allow a human being to come to harm” Science fiction readers, and many others, will recognize Asimov’s first law of robotics. After reading about a bot called GPT-4chan I was wondering whether we should include: “A bot may not insult a...

PT-2022-6641 · Cisco · Upstream Works Agent Desktop For Cisco Finesse

Name of the Vulnerable Software and Affected Versions: Upstream Works Agent Desktop for Cisco Finesse versions 4.2.12 and earlier, 5.0 Description: A stored Cross-Site Scripting XSS issue in the Chat gadget allows remote attackers to inject arbitrary web script or HTML via the AttachmentId in the...

BigBlueButton Information Disclosure Vulnerability (CNVD-2022-82638)

BigBlueButton is an open source Web conferencing system from the BigBlueButton community.BigBlueButton suffers from an information disclosure vulnerability that stems from the lack of information protection measures and access controls for service meeting announcement chat messages.An attacker...