MAL-2024-1319 Malicious code in clistsy-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d90d0caac26d33fe35373881cd3af29619f9941a50edf7def106fb9a4f2243f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1295 Malicious code in teleport-app-example-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4554cad7be69cbff28d6e2e4d3535b5d7b4158f2efa1c79eaaf705151ec686ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1284 Malicious code in discord-caches (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c46cf6695c1ee706d7c20760d479bc271d109c548485e896885c9f7b6d704928 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1296 Malicious code in waveapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ed8a707955886dfaa2b55283c703e3acbc8f5db17a426587702b53e53a9c0fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1266 Malicious code in wt-fe-buz-utilities-collection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da59ce3066bc4f743fd62c3c5db000f13a21c5167bf5987991697d4b631b6288 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1213 Malicious code in @lbnqduy11805/bookish-sniffle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d95228871b0d604b7e64f4bb155e928331863408ffab79af790ee8353994622b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1238 Malicious code in @lbnqduy11805/stunning-fishstick (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b1698a95126b49cf4de64fe4eb7992fc33dc6fd9d81197fa0bc6ac1bece66f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1236 Malicious code in @lbnqduy11805/studious-memory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8be405b7389972c1c848ccf1ee4a873140a945c75e3593de98642061da7d5520 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1217 Malicious code in @lbnqduy11805/expert-waddle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a6c9de4a9a2e92640f7ed45ec0f7a7c36e202c83d3d062e41e96f3562f2376d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1251 Malicious code in shuaishuaiqiang (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ac0c8f14a39bde6c27443c843a6185fa0e6ad3c0117eabe24eed2b276ff3336 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1250 Malicious code in shuaishuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20d1913d5bf067f2ae6c33f0d8b2097502182b13e9c06433d248609b037005ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

U.S. Cyber Safety Board Slams Microsoft Over Breach by China-Based Hackers

The U.S. Cyber Safety Review Board CSRB has criticized Microsoft for a series of security lapses that led to the breach of nearly two dozen companies across Europe and the U.S. by a China-based nation-state group called Storm-0558 last year. The findings, released by the Department of Homeland...

MAL-2024-1192 Malicious code in package-ddgjhd-weagd-24h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cef1d69ea4430962765b6d64ea615799272b79edbeb858dff62f8113a49b9704 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1190 Malicious code in hydrogen-sfdgspsdmq-test1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4f335f9d806c828eeddff7f8424627b1b60dd7471b65a399c2fcddb75f6634d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1193 Malicious code in package-dfgpd-dfgdfg-24h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8791e7d1940111ec98262882ec9b4ba3bc94bd1b739f62c31ba48ae31e6310bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1181 Malicious code in shelllib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe0f8a310e6c94039b69ac79b41e0121fe70d0ec0dcc2d27627ab66084b35148 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-PWQM-X5X6-5586 Cilium has insecure IPsec transport encryption

Impact Users of IPsec transparent encryption in Cilium may be vulnerable to cryptographic attacks that render the transparent encryption ineffective. In particular, Cilium is vulnerable to the following attacks by a man-in-the-middle attacker: - Chosen plaintext attacks - Key recovery attacks -...

PT-2024-22610

Name of the Vulnerable Software and Affected Versions: Cilium versions prior to 1.13.13 Cilium versions prior to 1.14.9 Cilium versions prior to 1.15.3 Description: Cilium, a networking, observability, and security solution with an eBPF-based dataplane, has a vulnerability in its IPsec transparen...

MAL-2024-1156 Malicious code in commandlib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64d4a50bf3fdea05ae20a06941d278f50e75d47cacc332a89a31934b2cdef5c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1135 Malicious code in super-social-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acf38469c6e1fd929fce485f4b3ff1b4f3d7399422a92e8b23c61339502ad299 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...