Malicious code in configure-pages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79cd1afeb9acab2c5d187d719ceadc3a57f71df17a7d824796c4d9fbcb61081b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11959 Malicious code in configure-pages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79cd1afeb9acab2c5d187d719ceadc3a57f71df17a7d824796c4d9fbcb61081b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12039 Malicious code in setup-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3cd9285f7d743a645d9b4834df4d7f61b6cc9bd314cf339252e7458d0f61244 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11987 Malicious code in go-dependency-submission (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa0e3837d434167d18ab0ba251b0ce73d56ed83a0c773df12c8ebd99542f8eaa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12019 Malicious code in owc-gravityforms-zaaksysteem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 673deef983f16eb6d5cd07cd47da2ad7ed5dae42fbbaac79e1ca22c1db7db6e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @goldenfront/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f95dc18125b3436d5aa28ec2749393d36b97510a1b2f2796200c8e6d8fecd00e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dz-lib/dz-cli (npm)

This package has a preinstall script to download an execute a Go-variant of the Cobalt Strike beacon. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec9421e5d1892420fe8194f8361f8c856ef3b31d6996e2554d840fc850e59a1e Any computer that has this package installed or...

Malicious code in supply-chain-planner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e04d233f8a8aea9243490197311b90d7313bce41848541de6447f1c8538b4448 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solara-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d6e86743114e65716ebcc22493a5d16e0e807c0701cf4233fac1c9eb47f821a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11907 Malicious code in windows-confirm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d941ea99acd2b75940d396cc9ab95033f82521f2085f79948f2ab44796a1a8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in action-mattermost-notify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff777c42ea9a589391478ecfd89da15137033e8ce5e0961b26f277f6e055c70e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11832 Malicious code in imran-downloader-servar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0ed3c408311c79c6c881bf500f227a981d7cd2c0908cb00a0bd010e9d5352bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11807 Malicious code in nayan-api-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3aa649015a7b9b6a0c072dff43fa33c006eb20cdc5039c2ba526d686ec328223 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11806 Malicious code in internal-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32a6bd675ea3b0d59c2be36d20bbc131840884f76941be3816dcbcb662b9b5c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12147 Malicious code in idkit-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3975f5a9cf4acafceb4b58cbdef8c82972362d59618d5805858248051aa4bd72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Socks5Systemz Botnet Powers Illegal Proxy Service with 85,000+ Hacked Devices

A malicious botnet called Socks5Systemz is powering a proxy service called PROXY.AM, according to new findings from Bitsight. "Proxy malware and services enable other types of criminal activity adding uncontrolled layers of anonymity to the threat actors, so they can perform all kinds of maliciou...

Malicious code in peritter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e928152262a15c3663758b7d61ee855e89db1870d95ba6587ad86d367841c476 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in crypto-chalk (npm)

This package is a starjacking attack which bundles a cryptostealing payload. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8183583924c5f6f8fc0ab3f242d354d5ee91cf77816175d98f546ef2e631f8e Any computer that has this package installed or running should be considered...

Malicious code in cdp-agentkit-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eca0429e104094162231b21ae70c94d199a4c5c2d25813c0eb807d94d7079973 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11212 Malicious code in pentest-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 520906eb0ad37fc18cd5eb9f85d42fab4f8c71e45efb63e0a705a7bd16b49799 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...