Malicious code in bamoe-standalone-bpmn-and-dmn-editors-classic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3f4337208b3b0a1e286af8a7334f3d815345a95eb2dadeb5c4b58fdd4b43a8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bitcoin-sign-message (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87f9bac919ce1d304232e5c64601a20dad72ee9131683b31b35162d6717d84a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/dolorum-ipsam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b45b15af10108a25bff9c571d8df89e8f7f7f7620f2bac59f4e6bc1a751f2ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/dolores-iusto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fea4a1c6c3fb99d383c84e4980ec0ef3689527a59ed45a9cee4395fecd9d1c82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/molestiae-maxime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a0194f726866f73172fb43199e3370c72ab0dc943d5850e69d76f934fece64e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/at-eos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c39735caa2d27399c1cdd3e469549b98a191de327828414c58394d48a9b2558 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/dolore-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7d08ed35c49b86b0b9e388a63a5da3f44faf85eca7a8d3dd3a4fd5297156502 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f1f1a280982015f3ff40190b739a28eacd06aa84937889ff629cf2cb7dd63d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in toolbox-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2df94f6499b37161c460ae24047d64d2db531042b7ea4e2f4138128bf723acdf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

TAG-100: New Threat Actor Uses Open-Source Tools for Widespread Attacks

Unknown threat actors have been observed leveraging open-source tools as part of a suspected cyber espionage campaign targeting global government and private sector organizations. Recorded Future's Insikt Group is tracking the activity under the temporary moniker TAG-100, noting that the adversar...

Malicious code in cloudhost (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06d8e1813e9e9ae1dd5749ee815f32696a16d538138675ee92e5cd2272e6c870 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stylishhteks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab7ae115a3f473013d0ef082a8248081b7ba44388a767650b9cf36ff622e657b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in style-logo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 432922df618bfa7812ba563401c7e9006bf63962b0394d88412b57d859bd2eec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/amet-minus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c52036c1b28ba6a22f982444901ea3571e1bab6b7cfaa70849ee23ac91d01431 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/qui-doloremque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73f6e506e7ed7c86fa9cbeed8815eee8a649621a23376c32e57da65308035182 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/praesentium-ullam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6d744af54053ae1abf2c7716819ee7b15e627012edea83b3ab84ffe5839e71b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RHEL 7 : ansible (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - Ansible: Compromised remote hosts can lead to running commands on the Ansible controller CVE-2016-9587 - ...

RHEL 7 : ansible (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - Ansible: Compromised remote hosts can lead to running commands on the Ansible controller CVE-2016-9587 - ...

Malicious code in test-poc3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dd2e1b9551e2d05eb6769e870035396fbdd5bd09b3116b00901a73cb9e64859 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7900 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 878aeb82a49d804368d247c215e6c7558f6dd72355c907d30d144233ef77b4de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...