Malware in alb-um-availa-ble-zip-mp3-file-6053-the-specials-giqmz-flbewh

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in do-wnload-available-f2oap-wvzhe9

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in a-lbum-do-wnload-avai-lable-file-36733-tchamantche-9uiic-rfzaip

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in do-wnload-available-the-white-stripes-1-yywrn-pvfqxa

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in alb-um-availa-ble-zip-mp3-file-43838-stories-of-the-years-sslgg-bqfcko

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in availab-le-alb-um-zip-211740-city-burials-xwcy6-bhxnvc

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in a-vailable-al-bum-513977-rant-in-e-minor-lybr0-bdhlsb

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in a-vailable-al-bum-file-30258-secrets-of-the-beehive-rk1pl-vebirt

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in down-lo-ad-now-zip-mp3-116827-chaos-is-me-rj9kf-abdorv

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in availab-le-alb-um-zip-the-visitor-l1n8t-frzacy

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in down-lo-ad-now-zip-mp3-12737-talking-book-grhl4-lwvpqw

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in ava-ilable-down-load-mp3-today-35981-saints-and-sinners-mv3po-fqndxw

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2024-3400-Compromise-Checker

CVE-2024-3400 Compromise Checker A very simple bash script to check for evidence of compromise related to CVE-2024-3400 on Palo Alto Firewalls. Designed to provide a quick initial triage of potentially impacted devices by checking for the existence of artefacts outlined in the Volexity writeup an...

CVE-2026-1122-IoT-Firmware-Update-Signature-Bypass-via-Low-Order-Point-Injection

5. CVE-2026-1122 – IoT Firmware Update Signature Bypass via Low‑Order Point Injection Overview An IoT device’s OTA firmware verification uses a flawed Ed25519 implementation that does not reject public keys with small‑order components, allowing an attacker to forge a valid signature for malicious...

Malicious code in dsjklweuvhgsdcq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 920a2b5125f18a77594d8cbc33936a2c0aa1ff3a3a885c3910ac9fc86c738159 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mxckjdgweuxpsiohd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac994d415521db946a7f88a0915ff5e7b89d53569d4227980d3a9832f06ec3e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zxhgssiyluwxchn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e026531d4c72147180eef854ceee292ef8cf4da100b348ff7eb526734c249d64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nsdhjuiwqxmhsf1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c744817916474123d9e76c5a569eb6c71387549bdfe29cd4c99dc0e6182d134 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ticketcathayoct12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a300a5638b1fca85ef0319ef8c86ed446e362626f8704a7ba7ae8e0317b5b6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vjkpwjxbvndelta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 232e538a22dccee3bbca452b7b7ef7cea92bcc79d32cc7586099520703efe763 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...