MAL-2023-8505 Malicious code in @tpgroup/tpg-icon-inventory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cacf2bbe7dd64c7907b4bd3e3bf524d701e8c930d3aa540683dad15d74fdd15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8335 Malicious code in agen-sbobet-judi-bola-online-terpercaya-paling-lengkap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a4f992569321418e44d0198225fca97602cc4663908efad4fc4772d1ef27ed7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-434 Malicious code in fca_ivan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0761e4cb4957c3cdb2da290303672b71412107a385cb36c4de428110178428ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-615 Malicious code in native-svg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15bc529afd6136e85dade76e843db9a6cd064fdba0b39e6b954819d53bc83d7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Sh4D0Wup - Signing-key Abuse And Update Exploitation Framework

Signing-key abuse and update exploitation framework. % docker run -it --rm ghcr.io/kpcyrd/sh4d0wup:edge -h Usage: sh4d0wup OPTIONS Commands: bait Start a malicious update server front Bind a http/https server but forward everything unmodified infect High level tampering, inject additional command...

MAL-2023-806 Malicious code in staff-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe42b7ab0f9fa76802d6673661b7ec0a5af18219528d646ee7a037597521471f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-988 Malicious code in yandex-meteo-flow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad598f1585a297ca8d20439b26fa25afb526a1f69cbdde3832e457b6daa6cf83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-262 Malicious code in django-idm-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7500205256afd3e70ea8edbcfa2b5acf17cc55d212296b698b47098c635ef9a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Mozilla Firefox Security Feature Issue Vulnerability (CNVD-2023-05209)

Mozilla Firefox is an open source Web browser from the Mozilla Foundation. Mozilla Firefox is vulnerable to a security feature issue that stems from a vulnerability related to compromised keys in the OpenPGP revocation mechanism. A remote attacker could use the revoked key to sign messages, which...

MAL-2022-4002 Malicious code in jaspine-coer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13c42ed143490f4bce34a6a9f2a4eb9be0a757924b1a670608efa461e53f4045 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3448 Malicious code in grappq2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a0575cd64ea89c5b8a822bfdc35be4f89c8e177ee8ab3d3449834953ba75143 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1735 Malicious code in bv4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e7bec06b06596cc3885720f3e6f5e09dc416da65439664513655a92178d02c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5081 Malicious code in onmnom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 251e323f55aadc1d60506340dfc0cfe1a491b60b1b51a4e5036b22bd26106492 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3970 Malicious code in isplaivnobject (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2dd50226bbc6701126273b572221ecaabdfc2c4d8a40854b5fcded35bdee1a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1923 Malicious code in clicio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f598283c90f34d3c0aa37ccb45076f8a14d2c7e39983eb23db03c92a33920812 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2872 Malicious code in etherscan.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 600dcac789219bc252badd5e43250bd0650a60f14552aefc32997c52093a6464 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2476 Malicious code in diqcbaxzhtnsplfj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51a2b2e7a239d8ca23412056fbcc0f23304dd73f5b2355c9955689bbc0e4faa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4890 Malicious code in node-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e48deb4e94109fe1c6aa6462bcd840fba34d7a47198045030885d6e0f85931a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3372 Malicious code in github-brand (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdc8c7f2f32d79202fe127055fde0b443145f33ec4e185562c9c6be63af50040 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4699 Malicious code in mosutils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab68674797a17752ace24130b3aea1e0049141fa5a5de2ed97f75af36cd7306e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...