When a sextortion victim fights back

When Katie Yates suddenly started receiving nude photos of her friend, Natalie Claus, over on Snapchat, she instantly recognized that Claus had just become a victim of a sextortion attack. She also knew how Claus should respond. This happened in December 2019 when Claus was a sophomore. Both were...

Fedora: Security Advisory for golang-github-mattn-colorable (FEDORA-2022-ea8f4e232d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious Npm Packages Tapped Again to Target Discord Users

Threat actors once again are using the node package manager npm repository to hide malware that can steal Discord tokens to monitor user sessions and steal data on the popular chat and collaboration platform, researchers have found. A campaign discovered this week by Kaspersky researchers is hidi...

Malicious code in ot-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dad5cdded9388aee82059159f70f7d7e584e0660a0fc7659619289333b14fb70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5138 Malicious code in ot-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dad5cdded9388aee82059159f70f7d7e584e0660a0fc7659619289333b14fb70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-566 Malicious code in @roborox_int/elk-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ed457be000bb1802966825eae5aceb4b0d05a18d2e7fee5065b81aa7e2140fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

[SECURITY] Fedora 36 Update: golang-github-mattn-colorable-0.1.8-6.fc36

Colorable writer for windows. For example, most of logger packages doesn't show colors on windows. This package is possible to handle escape sequence for ansi color on windows...

The vulnerability of the modular interface between web servers and web applications in Rack, related to improper neutralization of special elements used in operating system commands, allows attackers to execute arbitrary shell commands on the target system.

The vulnerability of the modular interface between web servers and web applications in Rack is related to improper input validation during data processing. This issue occurs when data is transmitted through the intermediate software Rack Lint and CommonLogger. Exploiting this vulnerability allows...

Malicious Package

Overview klook-node-framework-logger is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Note: This malicious package was...

Malicious Package

Overview @atlas-angular/logger is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview @roboroxint/elk-logger is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious code in @atlas-angular/logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5388aefd4e4c621b09ab66dd4a1f6ddc6f43c2e148ed66c5aca46d18a4cc07d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in usaa-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56632f4bf4809fe8aad5c09f41a7bc015ea35db0fe1e1b85175a5059224e70cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6844 Malicious code in usaa-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56632f4bf4809fe8aad5c09f41a7bc015ea35db0fe1e1b85175a5059224e70cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6923 Malicious code in videoplayershakaperformancelogger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8d2832b7b40b0f81bcf38feb52c26aec84528baf1093cc1850d4319af3cd6d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sfcc-core/logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 363d3cd073deae0dd4ee963364d204aff9b5c97a13ad22d1790562817ee44e4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-586 Malicious code in @sfcc-core/logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 363d3cd073deae0dd4ee963364d204aff9b5c97a13ad22d1790562817ee44e4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in f5-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 064c3c3f756de9a0879182ceff2fd06c93793cfd340c7158af0616292b07afd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2957 Malicious code in f5-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 064c3c3f756de9a0879182ceff2fd06c93793cfd340c7158af0616292b07afd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mitui-util-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e6a7be7e3b504126eebb132adc15a526525b4e48797c4f432697980d12f0f06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...