Malicious code in wickrio-proxy-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c6fda4d57b981655b0f77e7c2ef57275178c755181e72cc8a337e681efc6425 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5405 Malicious code in policy-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da46f58ff0dfb44c63d922213b2d90d18977a19099a6283dd1f66e96469569b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wise_lena_bot_server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d497c45152e7ca1cf17203c6f3d594ab5034b0214fabeacd6a950b065d4c6667 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dco-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df58cd3871074ca88952cb9f0b8a69f7b28de8e0eae69a383867d2eb48db891d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2370 Malicious code in dco-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df58cd3871074ca88952cb9f0b8a69f7b28de8e0eae69a383867d2eb48db891d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2118 Malicious code in comment-watch-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cd02a3fc9a77347cd6b8710d4fa4d29e75db73c8caf2fb608e1ca6135569578 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in comment-watch-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cd02a3fc9a77347cd6b8710d4fa4d29e75db73c8caf2fb608e1ca6135569578 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3660 Malicious code in hoob-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8a968b140b81e9a237e2866e63e974258ce4ab658b8379f92778ea7cbaa2559 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in engage-digital-bot-template-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09785e5206208314eeba8ff583c70b7828c5ae38daa3cff958f813b713ca7b17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2741 Malicious code in engage-digital-bot-template-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09785e5206208314eeba8ff583c70b7828c5ae38daa3cff958f813b713ca7b17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rc-qna-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1af95347190cb80ff6def6e7f12e037250c25d2d9d3b86b202747825483a14f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5605 Malicious code in rc-qna-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1af95347190cb80ff6def6e7f12e037250c25d2d9d3b86b202747825483a14f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xnxx-dl-wa-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ae97fc6d17d4a931da57669f1fc5dcd02644f5a8c9c0f8d9a416f741c15368a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7286 Malicious code in xnxx-dl-wa-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ae97fc6d17d4a931da57669f1fc5dcd02644f5a8c9c0f8d9a416f741c15368a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-1801

The Very Simple Contact Form WordPress plugin before 11.6 exposes the solution to the captcha in the rendered contact form, both as hidden input fields and as plain text in the page, making it very easy for bots to bypass the captcha check, rendering the page a likely target for spam bots...

24-hr-music (1.0.3), 2pg-music (>=1.0.0, <=1.1.2) +126 more potentially affected by CVE-2022-25345 via @discordjs/opus (>=0.1.0, <=0.7.0)

@discordjs/opus NPM version =0.1.0, =1.0.0, =1.1.2, =1.0.0, =1.0.3, =1.0.1, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =4.0.0-dev.1637284165.37d3883 - @dishost/music 0.0.0 and more Source cves: CVE-2022-25345 Source advisory: OSV:GHSA-RVGF-69J7-XH78...

Yield may be stolen by MEV bot by sandwiching harvest()

Lines of code Vulnerability details Impact Yield may be stolen by MEV bot by sandwiching harvest. Because of minimum output amount of swapping is set to 0. Which mean MEV bot can pump price of AURA token to the highest price before your strategy swap to let you buy AURA token at an incredibly hig...

Imperva Introduces New Features to Help Prevent Online Fraud

As we move more of our daily activities and the services we consume online, the threat of fraud grows, and the risks become greater. Data suggests the majority of organizations are already detecting a rise in online fraud. In a recent survey of senior risk executives, 67 percent said that their...

A week in security (June 6 – June 12)

Last week on Malwarebytes Labs: FBI warns of scammers soliciting donations for Ukraine Microsoft autopatch is here…but can you use it? Prometheus ransomwares flaws inspired researchers to try to build a near-universal decryption tool Rotten apples banned from App store Hackers can take over...

Awful 4chan chat bot spouts racial slurs and antisemitic abuse

“A robot may not injure a human being or, through inaction, allow a human being to come to harm” Science fiction readers, and many others, will recognize Asimov’s first law of robotics. After reading about a bot called GPT-4chan I was wondering whether we should include: “A bot may not insult a...