Malicious code in react-content-loader-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29f4fac1cd9b3669fd66345e097ee2be915ef08de77e2fe1a0473640df479d33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cse-common-arch--long-running-app--create-vm-cf (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0082d72cd8ecadc18bff535a47c4269d9f8ed6d91c6c4a68c6285abf1fe38320 Any computer that has this package install...

Malicious code in jetpack-e2e-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe798df756e79d2deb6db29c4675b6e0255d8d3607198c924e2ecb4a485b671f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in publish-private-provider-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bab9547b7dc338e24a9c420f123daff70b59524719d6b302478d7987bf52e66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in truecaller-profile-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55408360c27ab729757f91541958607c4d4d284218d7250e8e785134f1fb9402 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in p2pb2b-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a0473d0f0125406881ecf6afe601b962e4ebfb4dd7aee64effa8444f4a84be1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in digifinex-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8438299c54e02e8c5d68152a85e81e6c2107adc6f80aa7c61ace3229748f2093 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rainhq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04b2196f1687ee8805513fcff48b5f2e724d08999cdaa53b03af18335224035d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in holahackerone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c18612fa91dc861c71f725e798c3acc7560a3f7735d2ec1291c3d90eec1f487f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spicy-sections (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1219a9ef68604ee2328197a68dbfe365cc32084933ca9ca0eff24d191dbb91d Any computer that has this package installed or running should be considered...

Malicious code in x-tree-view (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61b6ca0784ee478a2ed8461e3bf79ca722ead00764ed795cbda13b255488f3f6 Any computer that has this package installed or running should be considered...

Malicious code in apple-payment (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa58dd69fc5ac0761d5c5ce00fb9447675f6da6b04207194721048413e2c0e36 Any computer that has this package installed or running should be considered...

Malicious code in type-on-strap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb7c3c0201aafc369ec9ca67cd6610fafdf472d7be2ea007f687c0cdc3e9e62f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in facebook-pixel-wordpress-js-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3d88b8d260c2076030d62c623d5ba25ef3707962091c0e2a0c124f2610fd37d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vue-plugin-rely-cs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c55de31ae355d3d408d5fa428b5cfb2eca66005c92cf6e397da4a4f29a5cdd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lightbeam-we (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ad7b64aec88d3c8b93f244159ff01cbfdaf1a014aa9439598c978a25c848bf8 Any computer that has this package installed or running should be considered...

Hackers Use XWorm RAT to Exploit Script Kiddies, Pwning 18,000 Devices

Crooks pwning crooks - Hackers exploit script kiddies with XWorm RAT, compromising 18,000+ devices globally and stealing sensitive…...

Malicious code in bookingcom-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7237784b36f09a01626b97a404f66a5ec889f55f623dd7d6e907f48d2b99d69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Hackers Exploit Zero-Day in cnPilot Routers to Deploy AIRASHI DDoS Botnet

Threat actors are exploiting an unspecified zero-day vulnerability in Cambium Networks cnPilot routers to deploy a variant of the AISURU botnet called AIRASHI to carry out distributed denial-of-service DDoS attacks. According to QiAnXin XLab, the attacks have leveraged the security flaw since Jun...

Malicious code in autocomplete-theme-classic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 451eb3c367c19aa2d0c11a612b877514d92eb231559a3f7fff0e7bd2fc6ecb17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...