MAL-2022-6923 Malicious code in videoplayershakaperformancelogger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8d2832b7b40b0f81bcf38feb52c26aec84528baf1093cc1850d4319af3cd6d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3865 Malicious code in intern_scocco_rce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 965c25b46e74bee53f5e2b65ead806a47bc0e127fd1cf91f29ad31b2e460ecb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2087 Malicious code in com.unity.modules.unityanalytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26a89dc0dcb8d78e74d737c8c117ed9c2ef33e97e0dcdc8449a71e84516205b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1532 Malicious code in bfx-facs-places-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dba300d1dc4e1b60247b4eb8b1245d1626140b9315edef5aa64613fde19857c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4556 Malicious code in mephisto-task-compiler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eeb820de958446255bfd0e51fd1b7f9301ed6fdfb324b2e7d5513181960c4b02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1356 Malicious code in azure-mock-hub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f97bad1e0989309a92b20d090efcfe32618ba7883318c3e3f4b17be60a558f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5285 Malicious code in perf-identity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3bda53456f97f07496332b3abe3ca16054f9a5b0c18627a3d1427a3f417c2a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2043 Malicious code in com.microsoft.mixedreality.toolkit.foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 263c060bfc159c6ec15abeaea9e25a0ff51e0cae3c061ff742788722cf44e3df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1347 Malicious code in azure-keyvault-certificates-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d4a4dd27ca78c3baf11188004219aee2dde382de300b316e2276af5c2613b81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5237 Malicious code in payment_method (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcaf8d7ef9b2e7d4df92b29894c629acbc28978ee0fc89ae8d1b8ce4f45268d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6149 Malicious code in skfb-viewer-protocol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4927fb8f7bd066a5440285ee318f12ff607b41497351c980b56408dd0b35f244 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4696 Malicious code in moralis-websocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14634273e48d41bdb2458210235b37dfd6b2533ee98bbb97d873674841041de0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1297 Malicious code in azure-arm-workspaces-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25fdf3e3810b11986993e1ee312d73c2be2e122399ae83f6c577f58853782c50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-275 Malicious code in @flameshot/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8bbca4a9cd0a35a35928860188f38aa877f6edfa6b4eb2b65c110d2d83990bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4599 Malicious code in minicom-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0b6d5fc5d5d4708748782996c729a230d935ad5015d7e45fd191ae434c74814 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6986 Malicious code in vt-blockchain-bootcamp-starter-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1085597e357b5b1d2b12ab109ff9c279fa1cbca538e418cf962f34265384141 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4469 Malicious code in malicious-pre-install-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1741456bb70a37b2485b448c939f1c6bac3387f988e30a89c5ae1516b1610105 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Vaas - Verdict-as-a-Service SDKs: Analyze Files For Malicious Content

Verdict-as-a-Service VaaS is a service that provides a platform for scanning files for malware and other threats. It allows easy integration in your application. With a few lines of code, you can start scanning files for malware. ATTENTION: All SDKs are currently prototypes and under heavy...

Detection of ‘Leave Behinds’ From Nation-State Actors

Who left the backdoor open? By Trellix · March 28, 2022 In our recent report, In the Crosshairs: Companies and Nation-State Cyber Threats, over 800 IT decision makers from around the world were interviewed on their experiences with nation-state cyber attacks. One of the questions sought to...

Cybersecurity for Industrial Control Systems: Part 2

To cap off the series, we’ll discuss malware detection and distribution in various countries. Our team also rounds up several insights to help strengthen ICS cybersecurity and mitigate malware attacks...