New IoT RapperBot Malware Targeting Linux Servers via SSH Brute-Forcing Attack

A new IoT botnet malware dubbed RapperBot has been observed rapidly evolving its capabilities since it was first discovered in mid-June 2022. "This family borrows heavily from the original Mirai source code, but what separates it from other IoT malware families is its built-in capability to brute...

Malicious code in dolphin-dbase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cd9702f3fa3f82c265a1cb8d73de3f9f7446372aac73b4ce46efeaa5802cd1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in api-routes-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa098cf98014efb5822c9283caad8c78740b5592ec51aad691cb5e225282bf59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in search-gov-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 451bca5bdb635f0f47d70d754081dd0ca0a128b60a2c3fb3821b252695738d9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in unibet_package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a67ef96997f8e34d3306d86175222a89ce7b7d44c3441e251ded4788a537b8c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ui-shop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1502a52ae156bfc3c6970836d113ad8acd802d037fd01ab787c85d5de0acce0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in anytoken-locked (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0d2501597c91e0da0b6ab825a858938832f5b1789265e6207566b46353f9a47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xhnedzawcukgpfjv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a39821ab671a48b431878eb07bed325ec12db5a013141dcb24c567dd7047a610 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fcskuqoiemhdkwra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1498f59826547fe0fbb0bd767a6163bf369eb13b432a09194edae0728a588957 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rjvixkndpbkstuqm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23b6ae0345848824d482f7b62c438cb2b3f1ebf5a68e57e58e64f261e445f609 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yplijosmvagwfcku (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8879c26dce6d41807a56b82953eb900635053da08d2b186dc95305700d63b3c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jszxcgeobiqvnhlm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72d84d6740aa0c48e0a766ef65d5e894ddcfe4c12db032d3b3f082593c6c5a71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in knmkyipgcltveqdj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15eff354c6590cf17a43f7c6da5f55ef07c755ceb2644bcde5e5c3bab2657ee7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mcqnyxijgtedrbfz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3404eef7b9a8b5bf31ca16e2ba3ff18a5fc9b261b1cceb5a5a981d52174f9bf7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kslwiaxnkdfyqvpm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd52de315ceb067befe33a27512c2a96fcffdf252e6e78930a53a94cee8d63cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hgvrmwikcsnptaxq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95aa66af8e8caedb940e44dc9cfbe95f1e66dbc469925a99d9ef6d07a2db96a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aygpimbotnhfxulv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4983578ac318392a4f4280548eabb9c5b7d37a21c5ac3f58b59c95d9c13b5e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ixtskfghuraoebwy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f29d3e4999325a08758d0cb86540e7d9f8a82fc0b97e6b85fedbe621b5a61a8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vkchtoewspkjrfld (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9714a5dfba8b824c7635de9bfed3a9d446315111e7d60dc0355c94a09ea3e0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in roar-01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeaacbda79e7c5ad19617406b51e22bb02a81c23eed3c203b2214bf4b255f92e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...