Malicious code in @ks-radar/radar-error-collect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a7e2199870f46f65ae301b77a8853c7c0203492bd65638277944190b9b406d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ivr-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 998726f9d073fda61804b91c9c090376845bd077a3322770715d7c1f37d03449 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fiji-core-foc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99868c266f6b13c22eb7e5923b9f580d02691973cfe8a1a4636f226a2f4ccaab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mmolecule-mongo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58a366e3569240ed527be31fd441fd81fffa6cda4ef1aafff18620fb71f1b433 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @manomano-internal/mf-seller-xp-commons-error-handlers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b03058857c2a1572c2cd9cbc4ba9791b96cf5db391f786f10c32dc6e7e91adf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gcc-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c56396bd4649c70dcaeabf852889289fd684f12396ca746c0d623b5ea00612a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bspin.mobilecasino (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 65f32001f04a5f4b6e32fe438de1f89d70b3873bd38c8eac28761d78900b0ce0 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

Agile Approach to Mass Cloud Credential Harvesting and Crypto Mining Sprints Ahead

Developers are not the only people who have adopted the agile methodology for their development processes. From 2023-06-15 to 2023-07-11, Permiso Security's p0 Labs team identified and tracked an attacker developing and deploying eight 8 incremental iterations of their credential harvesting malwa...

Malicious code in @lg-private/mongo-nav (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cfb13dbbdcd525742b9cca74fa4bac901e7a3e1601a9dba4e97986336210dde Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in usaa-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35bce4289bb065eb9e1460adcc822a34e49647575381e636708872a124ddbf1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in youse-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ca53bdb06657a9cd39a9746b31d16a744e10fc843f033e4c726a6f6a2815641 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ynf-dx-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6dfe1e0b8085faef3ed0105448c3cc1d7f7bba72ab13023a2eb5ba38827da39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deptrailoitaiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1517b7969146ae1576e26d6cf463560b498917613bff95cffb733d16df00406d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coinbase-wallet-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1892cfeefb3909aa3aed58c0112f2bc9fcb0a762f2242e57c991846a6b8bc875 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in docusaurus-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 051d35253b6ae2ef5d7366a3879b1783f91c35cc5fa1346198db3d6326e0e589 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-ivancotacte1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68b9dd7142d0fb0d52f6afd89beeb1f1ab065b4d13efeff8d7f032862f9f7f13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Estée Lauder targeted by Cl0p and BlackCat ransomware groups

Estee Lauder is currently at the heart of a compromise storm, revealing a major security issue via a Security Exchange Commission SEC filing on Tuesday. Although no detailed explanation of what has taken place is given, there is confirmation that an attack allowed access to some systems and...

Malicious code in identity-management (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51996f6a2e2b1701e5670d8d169328ec0089179efef72ac9d2473f87ca47adf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tools-fbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 745007f01f5f0cceb40a0e99466580a2062d2607e43f603746af44e7c3b3cf6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-dongdev-remake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56a044be2fd2a7228afdd892e8a361e2f6531ca357252a66cbcea10716ec8c05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...