Malicious code in securedrop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a6e71494cc9a9dcef7e0a491a7cf5c91eb09f8908655726169ff32e3a94a9c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in secret-orange-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9831 Malicious code in secret-orange-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aria-web-telemetry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16ad0cfe7b7d9636482741603c31ea841100db6c7a18a17bf08ecbafc906fd7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Qnap QTS Insufficient Entropy (CVE-2023-34973)

An insufficient entropy vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to predict secret via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2425 build 20230609 and...

Qnap QTS Out-of-bounds Read (CVE-2022-27598)

A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authenticated administrators to get secret values. The vulnerability affects the following QNAP operating systems: QTS, QuTS hero, QuTScloud, QVP QVR Pro appliances...

Malicious code in aspera-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4ffc4efa392a68f9bbb7a8e63541c73ca6199c288c1ddf01880986017469166 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

More Details on Israel Sabotaging Hezbollah Pagers and Walkie-Talkies

The Washington Post has a long and detailed story about the operation that's well worth reading alternate version here. The sales pitch came from a marketing official trusted by Hezbollah with links to Apollo. The marketing official, a woman whose identity and nationality officials declined to...

MAL-2024-9296 Malicious code in shmam-mw-test-3-test-package-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b51f76988cbf6f57115b148f6bc499d56997dcb2eef0257e563fffbef11fd982 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9293 Malicious code in dmall (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61365c65a680ddb23f6643fcbda3617d5dd977a74254aea0634952fd69d98a21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-28243 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions 2.3.0p18 Checkmk versions 2.2.0p35 Checkmk versions 2.1.0p48 Checkmk versions =2.0.0p39 EOL Description: The issue concerns the insertion of sensitive information into log files in Checkmk, causing SNMP and IMPI secrets of ho...

Malicious code in timeline-airtable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82972946c40c712d890ca81684f6f8e6cf2215c45c13f10665f22be10ee7f441 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gcp-monitor-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8ac49f0f48f0a8f3b5ab417aeeeac247298e9ab4f211f88aadcca93bc624e58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9245 Malicious code in pt-validate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce4c091ee99f34bd672788b16dab6db4b2d09b61bf4a01116168d840902586c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9228 Malicious code in duckc2-v5.3.3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b592408b0378349ea039f5609350090b988b983226d34cfdcb1a741768642c2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in duckc2-v5.3.6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1787f323cf8287cce75c9f98309dbf5edfb1721a840a920500ec0e0cdb6be06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in duckc2-v5.2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57ecbf93765f81c2e3f477963e5e1fc81ea3569e73078a57a300ae10543d2a02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9226 Malicious code in duckc2-v5.2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57ecbf93765f81c2e3f477963e5e1fc81ea3569e73078a57a300ae10543d2a02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redux-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f0972d9d0c165383cf5d724889a9c0b58cd2ffa5ff2ec57df1d3f56a33b5609 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hubs-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c72c2b5b928c9cc0211f1440d05124b34af18a3c21c7db1bb0ac7d72d12c39cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...