Malicious code in wlwz-2312-3305 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 281213c82fa39d4ad948b3ae3811f9b4b767aa55d2d53dbd269ced6612dad917 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-2706 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c13753af8970a04bf16ffbde3fad42e0c158eca8f024e0b82cdf6d9e8c4d854 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d122fcf9d844d0750d5b9f417dc03ea3f03e16387655de0ee8692050b506c040 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-0107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 690ffd08069319c6bea90178edc2d8849b53d8dbff103c9d5a292abe4ce92a7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-0106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af95d3ae53a571c4ef941876399b080c9368317453c5a9b0864d6f1efea38bf8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-1401 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 042885938d93cc4daca9d9c5d2c7c79547c1bec56081d5f19f2d1dfe7808107e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-0104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5e43717fbc31c2ecf7ba1616d078c32e0ce850f66dfcc54c890237feffd0c76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7700 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c31713aaaa48189a69a61d66875a7a4ef2efe725ce606cefa292a4ab9e1617b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-353 Malicious code in wlwz-2312-2003 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6c8932c831e59a44db22fc2cf606a386ce5987461f78dc591a4bf14b1a6fee9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-241 Malicious code in wlwz-2312-0708 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddbbb58e61c2fe33507e3541e0ff81e5af96693f2ef80e849dba8320748edc07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7007 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 054324edaf863762b0676dc56bb6ef9b8dfa5f3798e0f9815e1e4e01946d9f33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7006 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a49ea2d48a1399c3f93699ef1ea24eae7f5c4c436da7d8e049b472583780068 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-0103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb9870f8bf154e5ec1dd005aedc7dee4c506c5caec3252b1f72f13e5760261be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-238 Malicious code in wlwz-2312-0705 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73f3954b573d83dd29c8986e3c1ba516c13334ae09ce7a131397594793f4eab0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2311-5600 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b11d2225504316c6ba5d94d64e0cd25351c0db51aa106188ecf04a58004ffe0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2311-6208 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 697d158d5ab8fcf534374358bc3929b95bf31d131f987c186c073e2f081c9b59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-2000 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 470f83756bd0e14995c93ce4a19672c8af2854f0d9d1ffa7d80a7c79abd6e262 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.js-gothic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 273a606f7db6fd2c9266d51a4e60e10fd2ec43e90ad4df3c711397e15d4b42cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @shenmue_dsc/shenmue.js-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41741ce46c179a00941cfeaddb00888355b79c723e63e36f44cad7b82a2d258a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Gssapi-Abuse - A Tool For Enumerating Potential Hosts That Are Open To GSSAPI Abuse Within Active Directory Networks

gssapi-abuse was released as part of my DEF CON 31 talk. A full write up on the abuse vector can be found here: A Broken Marriage: Abusing Mixed Vendor Kerberos Stacks The tool has two features. The first is the ability to enumerate non Windows hosts that are joined to Active Directory that offer...