Malicious code in megaman0072 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82cb9aac02107b534701f8928f683557dfb9e7a3b552c9f906e784643622c6b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in snapcanvas-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca63100b204e0ac6e533a20260a056f1616b745eeddc35ba6894b4cf462c548f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in contract-metadata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 531d1b915e5de8defd42622891db5be29a54fa2830480c3e30fd19a8d1a75cbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in polaris-for-vscode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6bc34f6d71b60060bf2cca416b9018d7f97fd0f233c710e9b92625642c4bce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-jesting-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71ec06473f194b7d5d29cb0ffa9ec9d978b1bb669b62c4bc14a46453e5fb8117 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in metamask-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61c1b1a606468376d3cb2a636e220c258458fdc1f12980fc4d21644b7f6197b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in generator-connection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b345a8a1a86ee085f16d78670da372a22461e5135ffd1e0f252cb45ca2985bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in remote-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fcb162e726d16a6a879f1638e37d2ff333ad217f5c75decb034d9b8330a9167 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in assign-pr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62e185441fd99093a564a1a297859285aaf49df491f7beb894114173c842fd0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in miew-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea5cd1ed744f747bc00ccfcb2c9b587d0c94ec38dce7fa5e2e70569368030f1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in atomic-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a312917055a535347fc34c0b8dd11c2a947d7fa9fbfd5972cdfe7fac5d4f981d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wallet-options (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8077634aa96da6da50506aa7920955ec524183b7336c8578215ab88e8d7ac485 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apps-showcase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c82f48875c33cf0dc7ce3363a53872dd7ee778927e9083715b9d88b29be083b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in reorgs-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b13830319a43af9887566ccebf66edc38aa622d4ef7464ffdaabfd9a41942ea1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in action-prebuildify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7d42123dbbc7211362fd4196ee88f2f1183483beab9bf105645f9443d833161 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in frontegg-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8f178114efbe21e062c2f4f30e82d413adeef06ec35e636e38b9d5fabf5f2c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cat-webcomponent-image (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e416fba4ad4098c98b9a1b6b381472b248c0fc0dd977333c87e9f707251deb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in purple_team_midway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48e1d2b1fbe20521d638df7232e8617a51354104986647c485570374818b08c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-20488 · Typo3 · Typo3

Name of the Vulnerable Software and Affected Versions: TYPO3 versions prior to 9.5.34 ELTS TYPO3 versions prior to 10.4.29 TYPO3 versions prior to 11.5.11 Description: The issue concerns Admin Tool sessions in the TYPO3 backend user interface that were not revoked even if the corresponding user...

SharpEventPersist - Persistence By Writing/Reading Shellcode From Event Log

Persistence by writing/reading shellcode from Event Log. Usage The SharpEventPersist tool takes 4 case-sensitive parameters: -file "C:\path\to\shellcode.bin" -instanceid 1337 -source Persistence -eventlog "Key Management Service". The shellcode is converted to hex and written to the "Key Manageme...