Malicious code in oj-lint (npm)

The package oj-lint was found to contain malicious code...

Malicious code in oj-sp-attachments-common (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-12014 Malicious code in oj-odcs-fontawesome (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 305cca77ffd82127e64a3a925db786f7045fdb77cfcbdb5d968a8a785164e69b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oj-odcs-product-selector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 709903d8ce577ec3a287d787ad000d277c61e0c9a427262948b5e61986e5f320 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oj-odcs-linked-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d17c600cc0be18696e4ab114d64ad488bd7f257bd8bfe509b372437fb919b0ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oj-odcs-fontawesome (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 305cca77ffd82127e64a3a925db786f7045fdb77cfcbdb5d968a8a785164e69b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oj-odcs-category-selector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a60a93d78df8a9fddce4544e346f4e972b8d22bc721038cc23b9461ffdd9dcad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oj-odcs-selector-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03e1915e461fd9e5e3cabf5ac88ddcb40add1449d47b7773f28d095c1473c23b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oj-odcs-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a6c15cc75636529a58d1e70b3731207bdde080965ec886c0fa3a651f3d49f58a The OpenSSF Package Analysis project identified 'oj-odcs-common' @ 3.3.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7778 Malicious code in oj-odcs-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a6c15cc75636529a58d1e70b3731207bdde080965ec886c0fa3a651f3d49f58a The OpenSSF Package Analysis project identified 'oj-odcs-common' @ 3.3.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-652 Malicious code in oj-mithril-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa5fab859196881e392265ee85901316c60eebc3d334f9b4eae7c4bb039723f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oj-form-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08640301c07abb7a71bc12fb8175161185cb6ac67e0118f9f0e05ec591d5f30e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oj-mithril-packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5fee5d58e7e1464614f1aa017521ae6613da70897bbbc6ee11360593f419eca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oj-mithril-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa5fab859196881e392265ee85901316c60eebc3d334f9b4eae7c4bb039723f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-650 Malicious code in oj-form-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08640301c07abb7a71bc12fb8175161185cb6ac67e0118f9f0e05ec591d5f30e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oj-cropper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8ac78944374e1d277f31475f719c1e4b81025aaceb5d2ec5afd45ed363d39c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-649 Malicious code in oj-cropper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8ac78944374e1d277f31475f719c1e4b81025aaceb5d2ec5afd45ed363d39c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-651 Malicious code in oj-mithril-packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5fee5d58e7e1464614f1aa017521ae6613da70897bbbc6ee11360593f419eca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure in ojoptions.rb, when FLUENTOJOPTIONMODE is set to the non-default value object. Remediation Upgrade fluentd to version 1.15.3 or higher. References - GitHub Commit Credit: Peter Stöckli...

Windows shellcode stage, Windows x64 Reverse Named Pipe (SMB) Stager

Custom shellcode stage. Connect back to the attacker via a named pipe pivot Module Options msf use payload/windows/x64/custom/reversenamedpipe msf payloadreversenamedpipe show actions ...actions... msf payloadreversenamedpipe set ACTION msf payloadreversenamedpipe show options ...show and set...