Malicious code in arc-canonical (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acfcbeeca7582039a86ab0c90905592c60039b3baa27c891d73885284377ce06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tmeme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da03f6be9ebe998d8569a2e31d2d239440cfbe836d7aa80fd05214ade2206a32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in skyscanner.github.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 562fc699118e25f03d6d6a536e7fc3223d2afc25b8f930b3c473541a554652a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

tomcat: deserialization flaw in session persistence storage leading to RCE

A deserialization flaw was discovered in Apache Tomcat's use of a FileStore. Under specific circumstances, an attacker can use a specially crafted request to trigger Remote Code Execution through deserialization of the file under their control. The highest threat from the vulnerability is to data...

Researchers Warn of New OrBit Linux Malware That Hijacks Execution Flow

Cybersecurity researchers have taken the wraps off a new and entirely undetected Linux threat dubbed OrBit, signally a growing trend of malware attacks geared towards the popular operating system. The malware gets its name from one of the filenames that's utilized to temporarily store the output ...

Malicious code in package-ionicons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 447404d0e5223251e0bf185219b2cfa5c047f97b476983135cb64a9522c1c4ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ionicons-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe00741540fe3c9a94e59b4a511cd217e5b86817d5945e017674d4c92ccf11f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in swiper-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b97df99e38008c85b965c6dbc9277f1c08a98288578d244c25a5eb8d2d853d5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in footericon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5abd7d180b20b8c2f5eb6e7ed38e468ff34f377559f4cf012a298bebdebbaf99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in io-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af254b2a53bba08ba0b4ae7258357e2ef8a08a663eb4fb07a19b331753ef234e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cd-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4882b60cb8f5f16879f25bb1a16ba37bc10533ed8fef5109291a057a690a89b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Microsoft Warns of Cryptomining Malware Campaign Targeting Linux Servers

A cloud threat actor group tracked as 8220 has updated its malware toolset to breach Linux servers with the goal of installing crypto miners as part of a long-running campaign. "The updates include the deployment of new versions of a crypto miner and an IRC bot," Microsoft Security Intelligence...

Malicious code in cleansheet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16c336fdb150ff783eca4ce31fd4ec23e6982aa39e2b53ca247c56d46215f159 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in purple_team_midway_teste_cenario_2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28934a167292330b02fcc17d36240c4fb6daef5ea6ca4120f4ba7e10b7f53b3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vazgarules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ca4b5d2538771623dbbb59a4140f766f3def6770b88905172976630c3fb32e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rhynocallbackpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bee8048e72c9679df98896285ceae25c5f6a747569f659b6aa8aeaace5237ee7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in horizon_dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82406cfa06f094bb35f44405c48be71c3c5540388e4ef38b508424dc781bd3ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bumblogger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1566bdc7e0ecdd1c4bbecdbe30c791ecc1fec3a2fdb0bc577bf07136299c0ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in slg-shared-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dbd3031f472625754de58e128a37c5fd4d5784d9e57203f7a82ce8460e26b65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Defending Against Scheduled Task Attacks in Windows Environments

Scheduling tasks is one of the most popular attack techniques used by threat actors to establish persistence on a victim’s machine. The Qualys Research Team investigated different ways that attackers could use to conceal scheduled tasks. In this blog, we describe three new techniques to hide and...