Malicious code in @serenity-web/channel-motor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2e1f63ab01642f5ad7bc933a823db954af9d0880bc4ef256f32077a9b89b714 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.js-selfbots-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2aa956daa50889570aeb8de98727c75ac62f6c332efabdcff3dbaab8e43e6aeb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hackathon-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c2b5db7a78bdce1245f6a6eac22c3251fa6bde8775c352c70a7a7c3f1d16bf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in djs-sb-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2be29482d052cda3fe6813bef98ba0696f3311f098fcff6b8e516f252860179e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in users-lookup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a88a9191912d31822f4b70dee7ced6454b97e1c0620c473d34e1855920c7b9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in orchestrationdesk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7c4b49b3a4dec106baa72132f15b7493b62457fa4f2bc0c4bf2ddfe83e58ea9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @huby/infovist-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6a9d9af98833f94e0e3d73a4dc90f662b96da4620bdbacdc5121e08983b066b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vivo-packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ddc60ba6935a3a4569ba5dec15c6cf00eb68779bc86d09178839c459ffb15de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

North Korean APT’s Covert Supply-Chain Ambush

Summary: There has been a significant increase in software supply chain attacks orchestrated by North Korean hackers. Notably, the MagicLine4NX and 3CX compromises gained attention, with the Lazarus hacking group employing a sophisticated approach. They leverage a zero-day vulnerability in the...

Malicious code in areweplayingyet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc131f3b217a186c1278c0f623cbc243ac04894e5fed716f5ecdce60a27b3944 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in immutable-seaport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d0c3932175941cfb3e5c2e6d1807cec6b147c92543a4a46e15833d6fe6837bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in re_rank_demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eef922d2749b6b914c7af74ab1c95d0c4ff4869dbb5619295bfee63a615ae5e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-38544

A logged in user can modify specific files that may lead to unauthorized changes in system-wide configuration settings. This vulnerability could be exploited to compromise the integrity and security of the network on the affected system...

Malicious code in frontend-style-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2950942ff85300d3cee0a0eed9f373eaaa043ef93e942089421c5a5586e209e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shithandler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd3d2d2f23f11e1a03fe9bbad28d2afea9ac0fabd63c4abfd437521e715fcfd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tst-atk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2033e787504d86b9c1f6d2daf7a33c85b76d469c02750192e284c092fd69059e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in frontegg-react-sanity-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb25e4621d231dcfb19174b3d68e319d416128e938f699d683cd4cd436f0fd10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in creators-landing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fc0499f838e1cfd0606c8ecd156259994c73c118b52297215ce9f135ca9028e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airslate-static.icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8abf1832c7d0a4193473be4adf31eaa434b0d49e675769a13b50c87a51652deb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airslate-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 187dae9cdc21ec49b7d2dd1609dcfe155123738e42a66793b16990e78bb18225 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...