Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...

MAL-2024-11149 Malicious code in noirxnodemailer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfb5c01486942b32fea497d1b731b1d73ca00dbbcd6b588f8065e24b128b5805 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Etomite followup information

---------- Forwarded message ---------- From: Rick Elnor To: [email protected] Date: Sun, 29 Jan 2006 10:11:08 -0800 Subject: OSVDB Mods Change Request 22693: Etomite todo.inc.php cij Variable Arbitrary Command Execution Hello, I am Rick Elnor, the Etomite CMS security expert and owner ow...