Malicious code in client-consent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36ebc6cac6d302018d141c45adee10302556bd3da3491d12734412f967aea772 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

About Elevation of Privilege – PAN-OS (CVE-2024-9474) vulnerability

About Elevation of Privilege - PAN-OS CVE-2024-9474 vulnerability. An attacker with PAN-OS administrator access to the management web interface can perform actions on the Palo Alto device with root privileges. Linux commands can be injected via unvalidated input in script. The need for...

Malicious code in nikmodzp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e854e48f3a98a1a2fafd6811da47c041201b2d27e260c9de160912108e4e9620 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in multi-module-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f39776c52c5a6a5c6f0a98f7fe10de67a9df1af23b6ee9f5015566a8bb718837 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in short-link-sharer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 735cc774b56e67d8c340132e845f7d6aa2bed09a124ecb6881b05ecc323d28af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xk6-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 551700c0879f93238fce3b7ad7cdbad0c44f8e068838fb16e2078032e964835e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redis-oracle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ea6e343b932f13174f4d2feea7f70dcf1900c9b51bf55a2abff025184ed0c87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in helri-shiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4d519e88d591f17cacd1c40eb414b21e026b9ea5d54240b23399cf203aeb084 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-dompurify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c91e7d551e697c3ae72eea274492e2bb8c59b0a5fabfff62717660304264ceae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bamoe-standalone-bpmn-and-dmn-editors-classic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3f4337208b3b0a1e286af8a7334f3d815345a95eb2dadeb5c4b58fdd4b43a8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bitcoin-sign-message (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87f9bac919ce1d304232e5c64601a20dad72ee9131683b31b35162d6717d84a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/dolorum-ipsam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b45b15af10108a25bff9c571d8df89e8f7f7f7620f2bac59f4e6bc1a751f2ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/dolores-iusto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fea4a1c6c3fb99d383c84e4980ec0ef3689527a59ed45a9cee4395fecd9d1c82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/at-eos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c39735caa2d27399c1cdd3e469549b98a191de327828414c58394d48a9b2558 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/molestiae-maxime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a0194f726866f73172fb43199e3370c72ab0dc943d5850e69d76f934fece64e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/dolore-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7d08ed35c49b86b0b9e388a63a5da3f44faf85eca7a8d3dd3a4fd5297156502 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f1f1a280982015f3ff40190b739a28eacd06aa84937889ff629cf2cb7dd63d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in toolbox-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2df94f6499b37161c460ae24047d64d2db531042b7ea4e2f4138128bf723acdf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

TAG-100: New Threat Actor Uses Open-Source Tools for Widespread Attacks

Unknown threat actors have been observed leveraging open-source tools as part of a suspected cyber espionage campaign targeting global government and private sector organizations. Recorded Future's Insikt Group is tracking the activity under the temporary moniker TAG-100, noting that the adversar...

Malicious code in cloudhost (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06d8e1813e9e9ae1dd5749ee815f32696a16d538138675ee92e5cd2272e6c870 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...