MAL-2024-10910 Malicious code in node-commerce-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfa533cdd1af622e3c90101a8a4cdd292f00540f515f5e264c683a2984199538 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10909 Malicious code in lunar-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe9a8b05cd878b17af9caf8b7741e3b99e737c24cce44b7e52942663d6f585ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10904 Malicious code in d1-northwind (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 962330e56ce116749d23c41a6b7723d950582340889862760591e83aa4784e1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eth-based-p2p-e2e-latency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 596b12335f8cd6e12055b2a8df2f4afb1a74c9275d3f22a0e21bc003956092ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10898 Malicious code in canvaskit-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8fec757cb441808c4cf235ccb1ef0bcf9325ffebc3a5efcc43bc21669e0feb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10912 Malicious code in quorumnetworktester (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53078554fb920e847c3ddd62aaee19d43cd5b39e7348b742de169c8e73fd4c69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10897 Malicious code in nylas-private-sounds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 612de4025068333f24bd17ea9b89669c891d1b53d78404a37c1dfaf655126501 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10905 Malicious code in dashlane-vscode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79f2a48c1181725012456cc91fb5af9013cdea7e6e5b193c8cd5947f247a4d52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ProjectSend R1605 Unauthenticated Remote Code Execution Exploit

This Metasploit module exploits an improper authorization vulnerability in ProjectSend versions r1295 through r1605. The vulnerability allows an unauthenticated attacker to obtain remote code execution by enabling user registration, disabling the whitelist of allowed file extensions, and uploadin...

Malicious code in graph-studio-billing-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afd4325b249b7dfad124c21ffe39f85d2e38f1b6c2d31361f81e821adb8365ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in codeql-extractor-iac-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3f77f847f2c7d09571ef2516734c1d483d434e0980f32c21967900b8d28dd4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10884 Malicious code in ens-app-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3332aa2e460c5078abc70574b16848871805818907149c50a3d7842e2a93007d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10882 Malicious code in codeql-sarif-security-standard-annotator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware daf28531c7b9ae5e115da81a3041d6e35bed2b6764cfabb14fdd1b11ff50a6fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10881 Malicious code in security-alert-watcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b571f55a5f40419ca8cad82f299058dbe569e0a541e1909bcde9ce29f239101d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Friday Squid Blogging: Transcriptome Analysis of the Indian Squid

Lots of details that are beyond me. Blog moderation policy...

MAL-2024-10879 Malicious code in ap-components-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b75060f671ee7ecddf3938775343212154c5eb91d9e4fba478a1f6062457b9c8 The OpenSSF Package Analysis project identified 'ap-components-react' @ 3.15.9 npm as malicious. It is considered malicious because: - The packa...

Malicious code in ap-components-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b75060f671ee7ecddf3938775343212154c5eb91d9e4fba478a1f6062457b9c8 The OpenSSF Package Analysis project identified 'ap-components-react' @ 3.15.9 npm as malicious. It is considered malicious because: - The packa...

Malicious code in @ba-ui-toolkit/ba-graphics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cecc8f033039168aed0576db76b1cae3235b3ec9b6634c22a38c1696a4a80fc1 The OpenSSF Package Analysis project identified '@ba-ui-toolkit/ba-graphics' @ 7.1.11 npm as malicious. It is considered malicious because: - Th...

MAL-2024-10890 Malicious code in webpack-svg-spirit-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e06e486295eccd406df5d378ae3d70ad72e5be5dad6bd5d99fde1d16e324f5af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-chat-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e1410c02449b7f9317f68317b69ec23e5601c189018c375ccdcb1d453def943 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...