Malicious code in hamlit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ce9dac66892a9767b3f04fe73b5e116a60654a3eed3c9ea1098b06527e6ac83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Stalkerware Vendor Hacked

The stalkerware company LetMeSpy has been hacked: TechCrunch reviewed the leaked data, which included years of victims call logs and text messages dating back to 2013. The database we reviewed contained current records on at least 13,000 compromised devices, though some of the devices shared litt...

OpenSSH trojan campaign targets Linux systems and IoT devices

Poorly configured Linux and Internet of Things IoT devices are at risk of compromise from a cryptojacking campaign, according to researchers at Microsoft. The attacks, which involve brute forcing a way into a system, are designed to profit from mining in illicit fashion for cryptocurrency. Once t...

Malicious code in yaml2stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1816a039a50de4469c1bede9e81c8e477e1103ba0fd8e76fda21bfcb8ed8fd10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in assets-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0980e797c7e6db1bd06873799b54350dd781176d8a2e104a7301a51053e3991b Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

Malicious code in ejs-audit (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6005ef8f32d3d8160fb459ec4f885c273bd8721ab0becf21fe4d27accdf4d21d Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

Malicious code in wagmi-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 897ea7598e9700b92a7273c617cf3ae2dfeed4a7557e9c604742cd38b16fc08d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-router-packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 329da6645c0b4c1b67bd28d5bc5b0cde6725f995276a8a0e93bed30b180921ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Google Addresses High-Stakes Chrome Zero-Day Vulnerability

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Google tackles Chromes zero-day CVE-2023-3079 vulnerability, which is related to a weakness in the Chrome V8 JavaScript engine. It poses a significant threat by allowing attackers to execute...

Malicious code in eslint-plugin-artsy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 489558294cd82cf59cd5486f7ce3fce82ec6c7baf9aaf9ba1edda5a1abf792a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Dark Frost Botnet Launches Devastating DDoS Attacks on Gaming Industry

A new botnet called Dark Frost has been observed launching distributed denial-of-service DDoS attacks against the gaming industry. "The Dark Frost botnet, modeled after Gafgyt, QBot, Mirai, and other malware strains, has expanded to encompass hundreds of compromised devices," Akamai security...

Dark Frost Botnet Launches Devastating DDoS Attacks on Gaming Industry

A new botnet called Dark Frost has been observed launching distributed denial-of-service DDoS attacks against the gaming industry. "The Dark Frost botnet, modeled after Gafgyt, QBot, Mirai, and other malware strains, has expanded to encompass hundreds of compromised devices," Akamai security...

Malicious code in react-vuejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a46729b2313e52604631a44fbc0c9a6e4dea2ce5ceb901b05e055a389bfcdf8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in the-great-passage-by-shion-miura-on-ipad-full-edition- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc6059821330a42297e793c18eb3cfae527b38b35d3c5491f5f0dd6e9eb2f5e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bound-to-the-past-stronghold-5-by-golden-angel-on-textbook-new-edition- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c2a2c44d99a498d4ef01c5298b14a9eb8bc90d2d2613d1ed92da9390469d4fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in origin-robert-langdon-5-by-dan-brown-on-kindle-full-version- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9d3f3379219c0c91bda649e483a3cb9ddc9ff24363501116063b156bfddcb25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oj-mithril-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa5fab859196881e392265ee85901316c60eebc3d334f9b4eae7c4bb039723f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in burningskyme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4ee30f3525c0cd1012da24e115e20326855b9dfe6d1f66764c4d2ddb89c9cd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in marathi_chawat_katha_mck_comics_by_24_gw97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8f2db052000fc6063f23b25b1e074b2c97af8149bd18b477e91746e4b2b803a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xpyqze_e38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a10721b811ae69102b4aa7293828e4875e5ed68eae75481680c11528f2b0536b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...