Malicious code in speedgun (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25adaef5bde67ea3df931836659d132606b08171782b2f0622669546f3cdf78c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in github-actions-slack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0838fb57bbc4692fe40f976eb83599cc51f263c1c3a3eb1b231cbb7939a34a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in data-privatelink (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2636aeb170b72bb394eb2f909679fea214cf2b85dd8cad2d6678e334e70eacd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tsconfig-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08dd3fd9f05003ef6ca4f61ed5a23a69fd09a1c7cd9973f6d2caaa673066c803 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hossein_lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46960c2c5dde62b7042f63997bd6c19247764e8cc3b1733b1f5e934fc05c91ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

This Android File Manager App Infected Thousands of Devices with SharkBot Malware

The Android banking fraud malware known as SharkBot has reared its head once again on the official Google Play Store, posing as file managers to bypass the app marketplace's restrictions. A majority of the users who downloaded the rogue apps are located in the U.K. and Italy, Romanian cybersecuri...

34 Russian Cybercrime Groups Stole Over 50 Million Passwords with Stealer Malware

As many as 34 Russian-speaking gangs distributing information-stealing malware under the stealer-as-a-service model stole no fewer than 50 million passwords in the first seven months of 2022. "The underground market value of stolen logs and compromised card details is estimated around $5.8...

Malicious code in cvs-codestyle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3da5af16e19bb4b158ddf6bab94fe69208f359c22aa8538d55e4fa3e4ea41e2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in geocaching-express-account-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fd22154955291fe6ddada5958c76a297f2e37a290111d05c984707ff2b2be18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mai-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40444fdff4b71d9bbfae7e0e2648d693d1c64f0bdbe1ce8e000a0f2af9f68738 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xv_chrome (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c881a12c5927e8417299e80ccc13de9f4da2e5f6bdf2f1471bd0525c84581607 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bc-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1d5617c26015681699f77459a3f1a44a8b19f0dcf78ed8228fc81852afb9a78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in safe-nonce-6218 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b26fc284064f9aad0b6e5f8e05c9ee3c7d9642783b8431ac1e90a4bcdfc869a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aae-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36e873811e988aacce5a1b80244d157a56da0753c128f1d7581878716119c230 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in state-counter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed067327832149a5e0aad36c3c4bd179c16890786155c7261ecab0d6f2cfe1d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Hackers Using New Version of FurBall Android Malware to Spy on Iranian Citizens

The Iranian threat actor known as Domestic Kitten has been attributed to a new mobile campaign that masquerades as a translation app to distribute an updated variant of an Android malware known as FurBall. "Since June 2021, it has been distributed as a translation app via a copycat of an Iranian...

Malicious code in @nexthink/apollo-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3596f839602da6a9bf358c4e2d46e8b16727da99621ec65e3986e417e8f6186b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iconbaru (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce35cb9bbb122fe24a2caafe52784ba144ff6a94efee92e578edeb6498879f21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in namatnawbyteweb6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 300554bac73aaed296e08d672fb74fb8f6e2dce21177a295250391e881936eb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.meta.quest.sdk.empty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73c876e578f9f409715ef627126da30f42f3e299ba698aac7fa841709b83f18a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...