Malicious code in wlwz-2312-2202 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e10e36ece1f9f0635b1737e646b57e8285e01b2f8e9728f3a258852c31f6b0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-1103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7eb3cad0c6be5185b444f2611f3c1f4277f2bc0edb5864196cbdd2c41a093925 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-0204 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 481e6eec652aa6799f0c100310a5848bb78d13382230d2ffe85043e3965b05f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-0805 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df0f7c0cca446699e186bbe9eac591dab538d9079bde3cee458a35077513d233 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-1405 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 923ab46e25c6d2410f33e0c72213cd066ea388e3c4471d511d720db3c1f48eec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-4503 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baf9156272fc976e982b48026338167a18686a6ef1a6af4c2f405486c2c82375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-0101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f7b6bed315237c97461395e2e22df72ad01377b69477f65012584188e6d8aa6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

NS-STEALER Utilizes Discord Bots for Covert Exfiltration of Sensitive Data

Summary: A recently discovered Java-based information stealer, named NS-STEALER, employs a Discord bot channel as an EventListener to exfiltrate sensitive data from compromised hosts. This malware is distributed through ZIP archives that disguise themselves as cracked software. Threat Level - Amb...

Malicious code in gothic-token (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4172096c341848a0f0d8c56be5e72561fe8d9b467aff45b6f1843bc3106a4a01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DarkGate and PikaBot Malware Resurrect QakBot's Tactics in New Phishing Attacks

Phishing campaigns delivering malware families such as DarkGate and PikaBot are following the same tactics previously used in attacks leveraging the now-defunct QakBot trojan. "These include hijacked email threads as the initial infection, URLs with unique patterns that limit user access, and an...

Malicious code in @ltd2research/tldrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b91e4540f7f53e684e429ddaece0e59adb5e02fb0e24c2faef4200ee61771875 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/sales-trends (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1dc8a9fced411404ef7782d2a8b9eb9a3a3652dff48fe8eb9906dfb2c537918 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca_kaizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58495d710c97f1a072f8b1a7715f33d3a6c8db188dbcfe8438f47ec1e2e282b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in newtesttocheckscanner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0ab43db32f51d45b83fb229cf4e2084b90f91beafb1a99342651c5693073ce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3tool-eth-personal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eacd67d6f3ad1e3b4f75c7ca18d9ea92cea75c57b72d37158f24f58e72fa766f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eth-web3-tx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c442b5b546b5967c812942b37c649d2e7caa2675e942bd96ddf40cbee1174f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @manomano-internal/mf-seller-xp-commons-module-scanner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6cdd98b7fbe9ce6b3c1686f312caf4b535e07290e5cfcd7ad051e874eb6d6ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in orbitplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx df1bde52050b0c84fcf4221afb1f77445edcbfc7e307f2eaf54fb104ce916f06 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

Hackers Abusing Cloudflare Tunnels for Covert Communications

New research has revealed that threat actors are abusing Cloudflare Tunnels to establish covert communication channels from compromised hosts and retain persistent access. "Cloudflared is functionally very similar to ngrok," Nic Finn, a senior threat intelligence analyst at GuidePoint Security,...

Malicious code in ux-logging-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 649b80a17f0912d20e34627fb9fcb9ee23f7e5dcbe67f9082d4499956d68f3a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...