Malicious code in refocus-real-time (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45da1f201ce53b0693ee1d8b969dfdcccc0ee919a86acf9efb6583538c7f6c47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10544 Malicious code in refocus-real-time (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45da1f201ce53b0693ee1d8b969dfdcccc0ee919a86acf9efb6583538c7f6c47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in akita-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 551f04343832933628b5f36ec11b0f08219b6ad2c16bdc366b56ce2977b5f721 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ads-common-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50ce13b31db6b72b7a12f51897d3a8041b9894c083ea0da052b7d30a8fd2e224 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10551 Malicious code in ads-common-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50ce13b31db6b72b7a12f51897d3a8041b9894c083ea0da052b7d30a8fd2e224 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aseemnpmk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4ea49246d59dff6f14c706b43c01a3cbda0e247126a5d67c6e91428922445f1e The OpenSSF Package Analysis project identified 'aseemnpmk' @ 99.99.90 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10535 Malicious code in deriv-app-id-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c03deb9ccf8f604f4e3ba191f6d8c2e3f94cc273950f13aafde768a468f13071 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

QSC: A multi-plugin framework used by CloudComputating group in cyberespionage campaigns

Introduction In 2021, we began to investigate an attack on the telecom industry in South Asia. During the investigation, we discovered QSC: a multi-plugin malware framework that loads and runs plugins modules in memory. The framework includes a Loader, a Core module, a Network module, a Command...

Malicious code in uuid-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 67e9eea857d57488a09639cf7c62b2507c6f72aa291543d524e2dd9a86532a73 The OpenSSF Package Analysis project identified 'uuid-utils' @ 10.10.11 npm as malicious. It is considered malicious because: - The package...

Malicious code in xgplay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fc40998dbfce7312db293c7404a1a116ea529846512149b891592e0920049e35 The OpenSSF Package Analysis project identified 'xgplay' @ 89.3.5 npm as malicious. It is considered malicious because: - The package communicat...

Malicious code in eslint-config-finance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d12427cc293ba0b610fa9341045e6d546b05be734e8b9b3135136720e183f04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eds-charts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48871e9d24d23d91ac9a6a1dcdd1bdeeddccd8afd09e38b55a5e02ad5136ea68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in x-portrait (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4f777ad032311636320b36bbc92cf2afaf1242290af10cbd15747c66836d8c13 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in offline-rl-congestion-control (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1c144e79980c0e56341b733c970e59592e1f56df443f7d1b41668ca35ec4cc11 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in sphinx-rtd-themes (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1933e78b1c1cac28d6c11543982037a14a670072822edf7efeba506a880e47a6 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in fairsequence (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f1230e40416399a228274fe18913e80c3e1fa3904ea4c040cb8c9e68b8d2752c A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in importlibs-resources (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 39a9626350ac0a042f49ec8c9203914a49f675be30c5f8f051e0315b5266d4f7 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10735 Malicious code in controlnot-aux (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a99770ef01fb53c863387ed64967ab6ed42be0cf7c901573dcd472db6ae51091 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10451 Malicious code in hllm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c984c02970a9295543df7e945c9aa0ab34b1102216b42ef189fa6d626274a00a A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10650 Malicious code in opteinsm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3afbe60728674f13392bf54a0267d4a2d8766e2d7bc9be1db665ba382a491b47 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...