Malicious code in swift-docc-rendeeeeeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45e4d71b34d2eb0cd66dc9d19da997d325017d19687f304f39e1138fe0a0f0fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @lbnqduy11805/sturdy-chainsaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a472ad3dc99c2febc88648cf3ccbf6f17c2a254e86c2ffa2e8ed945d25665816 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nespresso-bi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ecb1d1aad101d1cf5bdd8986e77fa20c75f039412cec1ebe03442f8fec9f939 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babel-preset-slick (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84d6e762e33c8c67e6c07bf7d934a1ee9d34e1d618d785817f5635d5e08a2c39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ccl-product-carousel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 498f6f9459c8d0b728723efe34defcefe3b77f2b9337811f30add970eb06798a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

After FBI Takedown, KV-Botnet Operators Shift Tactics in Attempt to Bounce Back

The threat actors behind the KV-botnet made "behavioral changes" to the malicious network as U.S. law enforcement began issuing commands to neutralize the activity. KV-botnet is the name given to a network of compromised small office and home office SOHO routers and firewall devices across the...

Patchwork Using Romance Scam Lures to Infect Android Devices with VajraSpy Malware

The threat actor known as Patchwork likely used romance scam lures to trap victims in Pakistan and India, and infect their Android devices with a remote access trojan called VajraSpy. Slovak cybersecurity firm ESET said it uncovered 12 espionage apps, six of which were available for download from...

Malicious code in ngpd-merceros-dynamic-forms-fe-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a63c636557949e167ac4cca437135be8c3160f70856ee5911c1817ba2c3f76a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CISA: Disconnect vulnerable Ivanti products TODAY

In an emergency directive, the Cybersecurity and Infrastructure Security Agency CISA has ordered all federal agencies to disconnect all instances of Ivanti Connect Secure and Policy Secure solution products from agency networks no later than 11:59PM on Friday February 2, 2024. Besides the Ivanti...

Malicious code in wlwz-2312-7502 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e05d19cb4731bbbec8c578bd55a6c6a32e2e957225d96f07aa8a6d7c46df6a76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7503 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 816579f52584a727d9c6d63dee7b44f18b70ac77f042c6804c4c72e41b56d163 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7602 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3dbd8240849571c0511de2015396a1f8ab92982d71a683246250e3124fdfa0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-8109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3b142a0f7e3a073d733c5173f30071ba189294b64eff717882b0679e6226560 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7903 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03d6e9e7530043ba781e756d4535c552fab9a56f2562fc9fe18a517950656e85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-6508 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 684c80c9199b5e09903a30dc5ae3a2b20a2986e9a88321451fd678adc5bfaf16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-6701 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87424c1db327fdb6fcdada86c19c1a4bbe8cf04e87a535b21eabc66bab4df6e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-6800 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 166f7a8f9273b58c99d4b98e0c59c61c80b785fc5867f8dbb4da4086f9626ed4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a59b45506c3694870f405e7c881ccb74f2ba12d1d186cb267ec165f926480fa4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7205 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea73b639a1b340ad8d08bcc6f153574202cdb00fb27a20a15e92c027ac3fb064 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7306 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9829193390b4dc67ccd5d673417cbb0ad7e6713e75ca1fa8f9aaed218fc031c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...