Malicious PyTorch dependency 'torchtriton' on PyPI: everything you need to know

The developers of PyTorch a popular machine-learning framework recently identified a malicious dependency confusion attack on the open-source project. Security teams are advised to check for infected resources and rotate any exposed keys...

MAL-2022-4887 Malicious code in node-kexec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c935f2cf93a69d3611bc002c76fb751088ccfda5985581797976d42dc55ce94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5328 Malicious code in phup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dac74638b6d2daf3c5fba99cb693badc947e824ec0622ec155ad7f1a0ee3100 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5494 Malicious code in prova-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 938fc5bb5c8e1be3541bd49183cc6bed9f7683b7d3d547f7273b89117e79d193 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1813 Malicious code in caliper-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 210ebc0158f74756155a2314326207438ca0b98fbc9a111e29537aee81fe768a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5533 Malicious code in pv_ho3ein (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7aa33fb89a5d7bd38f7efcced8a18b26c18b81d9e112bfd15547d569cee8f2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1961 Malicious code in cnscodes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18a19cff70f286ff9ea4f66d81c1f337995b03ed2709c869724897b97ff5b417 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2292 Malicious code in cvs-codestyle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3da5af16e19bb4b158ddf6bab94fe69208f359c22aa8538d55e4fa3e4ea41e2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3854 Malicious code in install-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51f53b367d37dba07b58ec3eca02e4d10b8cc63289e1b83775033b77b6b40798 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4470 Malicious code in man-installer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56d12d9a70c6fed6bf0d505f094550612014e752bb9b9ef0742b127c1dc65de8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3345 Malicious code in geocaching-express-account-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fd22154955291fe6ddada5958c76a297f2e37a290111d05c984707ff2b2be18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4471 Malicious code in mantis-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc5554ac604f20a4e97ec11d3c686e7c9bcc7245c43454a14a58033116e58d34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-493 Malicious code in @paid-cloud/contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6526d3495433a8e4be3aff2466c4386392e997265dfe4500ab304d6be32cf2f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6677 Malicious code in tttestsupport-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec247ef9b86fec7b8f1a1487f90871675bf61efd5c6483db68965ad27692f119 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6505 Malicious code in test_1_60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 950ef2274f4df423771ee9b6ab15186fb4be250100ff7dca246c6a3121140d3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6504 Malicious code in test_1_59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 311825f483147ad29879b55012ea2616f3b737e71a06e21f07f33a1d0e89f494 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6269 Malicious code in spring-boot-devtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24c0313226e487a37c9158c78bc620c0306eb778d0aa789677c0c77811785295 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-459 Malicious code in @nexthink/arm-jwt-decoder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51df48a51ecff12b69c9a30fb95f37dcd19cbf557c11e050fb5cd202e6a1d8be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-456 Malicious code in @nexthink/apollo-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware faa168f6a74af14b39193cdea04f9798ab2d20f8ad531d396b5207580e9fc5b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-457 Malicious code in @nexthink/apollo-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2442bca6d9a3dd356ea5faa389a7389021876ef535ddd23ff709bb803655af2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...