Malicious code in grunt-import-html (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ec8e51891af00720a442bc65b07916738dba4f56e5692d70fd86172e2ae699e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in inv-cyber-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e992b95056bfc349eb310e76c92712b6661c990d01d29e4e18f334d16f02a2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-playback-sdk-sample-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14ec9efa646e11150d914ed21af3d271495f5b12cb7e5d16bc00d4c6bbcb05d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in qunit-begin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b929a1f556c9d20fc74710d9609712fb8790c92576e92babcdbe8267022e6752 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in whjr-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9dce9c9aaa9e383fef4277d3ac40c8e55558803e648049e419c0f3370b4cec1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @logistics-frontend/polyfills (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f64b2f1ddf3127537e8c1840e3435d7ff1cbe9db0ed322bcf357600faace765 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in axp-shared-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1243d32b86a0aa2de720684a5c34da376dfc41b2180e7ae70811a21c0b54f3b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in diff-dom-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f64e6aafd5d8ac32a54d93dd52a12fec3af6efeaba3d6a301ee9f42e7de3dac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5312 Malicious code in pg-ng-popover (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7eae5ce3ffe7a6a45252fbf8e9e7baab3dd7e94d06676793c490eaa77094a06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in venzuella333 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9b579c5d20e026074c906ecd42c392f61c248695385900b87b8df7b16480b21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in assets-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05a4834f0fdf1d1525506291927bb9813a912ee5ac8f61ddacbb11e4b2932b23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7288 Malicious code in xo-locale (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92f65da170cd5aedf78940cd84c218fe4d0f5319decff6a709c640a9b354e735 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4049 Malicious code in jquerry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6621de25a09d367339e4f62396aa977577ce456706c54bffefc8207bdadf871 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Researchers Expose Mars Stealer Malware Campaign Using Google Ads to Spread

A nascent information stealer called Mars has been observed in campaigns that take advantage of cracked versions of the malware to steal information stored in web browsers and cryptocurrency wallets. "Mars Stealer is being distributed via social engineering techniques, malspam campaigns, maliciou...

New Malvertising Campaigns Spreading Backdoors, Malicious Chrome Extensions

A series of malicious campaigns have been leveraging fake installers of popular apps and games such as Viber, WeChat, NoxPlayer, and Battlefield as a lure to trick users into downloading a new backdoor and an undocumented malicious Google Chrome extension with the goal of stealing credentials and...

GHSA-PJWM-RVH2-C87W Embedded malware in ua-parser-js

The npm package ua-parser-js had three versions published with malicious code. Users of affected versions 0.7.29, 0.8.0, 1.0.0 should upgrade as soon as possible and check their systems for suspicious activity. See this issue for details as they unfold. Any computer that has this package installe...

CISA Adds Single-Factor Authentication to the List of Bad Practices

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added single-factor authentication to the short list of "exceptionally risky" cybersecurity practices that could expose critical infrastructure as well as government and the private sector entities to devastating cyberattack...

BazaCall: Phony call centers lead to exfiltration and ransomware

Our continued investigation into BazaCall campaigns, those that use fraudulent call centers that trick unsuspecting users into downloading the BazaLoader malware, shows that this threat is more dangerous than what’s been discussed publicly in other security blogs and covered by the media. Apart...

Protecting on-premises Exchange Servers against recent attacks

For the past few weeks, Microsoft and others in the security industry have seen an increase in attacks against on-premises Exchange servers. The target of these attacks is a type of email server most often used by small and medium-sized businesses, although larger organizations with on-premises...

Malicious Package

Overview From https://blog.sonatype.com/sonatype-spots-more-discord-malware-in-npm?hspreview=BbDPGbfh-40737456755: The malicious packages were detected by Sonatype’s Security Research Team leveraging Sonatype’s Nexus Intelligence research service. On analyzing these packages closely, our Security...