New NullMixer Malware Campaign Stealing Users' Payment Data and Credentials

Cybercriminals are continuing to prey on users searching for cracked software by directing them to fraudulent websites hosting weaponized installers that deploy malware called NullMixer on compromised systems. "When a user extracts and executes NullMixer, it drops a number of malware files to the...

Malicious code in @dydxprotocol/solo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 414b7a58031d755b2ab4f51d6bfc4bbaf5dad684161eab9b2d1062b8d4ce22df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in buffer_replacer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed7491fc6be30a2763f24ee0be15558529abebc9e31938df9ba36e5c9a4dfb59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testhawaii123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66b622e00e5b47c0f7e724899d169d92211866c0130b21dfadad37992e6f5215 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Microsoft Warns of Large-Scale Click Fraud Campaign Targeting Gamers

Microsoft said it's tracking an ongoing large-scale click fraud campaign targeting gamers by means of stealthily deployed browser extensions on compromised systems. "The attackers monetize clicks generated by a browser node-webkit or malicious browser extension secretly installed on devices,"...

Malicious code in ebayui-ads (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ab074972f923b11e148393b0e2759e65eb3b531563049d5b7304d6098384376 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in has-bin-entries (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dba5e25de7a276690ce5b73aa657d8f8ef53dfcc54f531205cdb92069886e818 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in useevil (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64532de08f717f9b8b574fc60b379cbe7db0f9ad3c687830222af7b3fe126a34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wvvbch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cf85aea835d80198c06087cf0bd4dfe448415bd394e75bd3a2709ba66193bcf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fleetrouting-app-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63fb40b68c60d02e7e83c653ff5903afa31ef091d1911f33bef10ac62f11b2a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wix-bi-logger-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1e185d8229566fd434ef411f0f422b917f946846f53e3b81e0f5c37b3dcb0d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bigcom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 980354555273dbe36d363aba06c76ea9c7618f2b1ef2e80343810130f6b1bb81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rakaganteng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9a770e598f68ed579a25ba739188c1b3663d5128fd59da128835895aca4d119 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thischingunique (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9cedeae9eb258fd7ce8e9a21395c4ca34d7a62c23cd0c556caf22aaaf057f820 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uwrljoin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a96f4ecf7318fae6d4238b58f15ea70a547d4c7c2207b0c731b3a6b05032567d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xbcrypt-nohejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a163e76793bb0dbc34106a413a795841bbd0b71e5bd37a82afa667022e39b653 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sprin0f (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 338126c2e6b13489053cc35f2fe24122cb85613cb2ed6ed4f087c8d80850feed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ss-loaoer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0ec3e73738b2c07875c310ceb73a6d5089c1549e9203bc74a94ce7aaa6e6a76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in traecr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c8b0b46393e77e40ef906f1c4c24388304711e45d8860da77a9ef13bb0abaff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uglp-rename (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d75fbb23c62d1ab4ffa42df080d367fada394ce5c51afcccc2b4957dc215d73b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...