Malicious code in byted-service-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99c7cbdcd79d3751d34a430b7fec43a8393a2facc81155373a2e914f3d8f39ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @david-lab/evm-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da15cab58cbaaf01db60d8e67007017a770017bc33db5b17508dcd03db50b1a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cms-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fe802200e8f58b566b37c54e10ab34a11c34d3eb8b7a4251aa6f20f0464a195 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lavora (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 707162c11004cd37c42afb9285c941fad905c97a1354411a3e02b1c86a2d3727 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3ibaan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0723e2f73351c72a1d56688e44b112cef8ebdcb2a4f19e221e0f95ba6d54a1e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in osm-legal-speed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efce0e1706c67e16298e03b91dcd0069873eae6922136c002862891d7579ffc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

New LightSpy Spyware Version Targets iPhones with Increased Surveillance Tactics

Cybersecurity researchers have discovered an improved version of an Apple iOS spyware called LightSpy that not only expands on its functionality, but also incorporates destructive capabilities to prevent the compromised device from booting up. "While the iOS implant delivery method closely mirror...

Malicious code in celtra-auto-exporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64b3e604bc1c8ad31a0221f82b80e523c53de78eaa600ba9f1af15205213ec62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in google-drive-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b852e689dbc27ffdc82219196cc1caf6535bfe509fb8fdf6fab98a642c019c6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wagmi-connectors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1849feb5a54edcfb0734af9c632f95290165ddd026b3a748050d2b136f9d3fa9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ssp5z6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e61846c2bf8da47f6af8717ec27c39e7685f28065bc4daac90813d03f41dc6e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-45273

An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used...

CVE-2024-45273 MB connect line/Helmholz: Weak encryption of configuration file

An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used...

Malicious code in mallutrojan1002 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e33b70fdcdd4f04f7c9f3c54ffb09557c23d65d978a70168754e3a8ac82e2040 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prismjs-editor-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 040f9d206fa46c86f67191c2a1777918670867a6e0888635b2f08567360ba10f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sendbird_chat_sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4235262a616f13a56e19ff50a343529ab7aad26e053bedda928754ea56e064a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sendbird-uikit-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eaffc5bb1fbe1dacdaed2b5c1c01a1b1a477d9f4572976e8a0c637012233adc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 1nzcej (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1049efd60580db19a51c86de897fceec13099eaa58f14c6e0c674a71e4d73f57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in o-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6d737f5ee09d703e74c23a6e240e943dacba7722152cb737b6e67feeda7bfeb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-32417

Name of the Vulnerable Software and Affected Versions goTenna Pro App affected versions not specified goTenna Pro X goTenna Pro X2 Description The encryption keys in the goTenna Pro App are stored along with a static IV on the End User Device EUD, allowing for complete decryption of keys if the...