Malicious code in wlwz-2311-3503 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67797be8dc36ebfc481aa95423d855f70b7a5b0e8699080da778927702bb86c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @shenmue_dsc/shenmue.js-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41741ce46c179a00941cfeaddb00888355b79c723e63e36f44cad7b82a2d258a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in naoi.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcf0307e98284025a436e760f0317cb5220a08fb0c7504e71100986c95f7245b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sync-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 335de7612c8237e0a74d2c894424bda2c8a5e6547fa9bb6782ec0a94d4353226 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sh.keptn.core.control (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9b8763390772109f1229fafc67d20bf685bb577efd7263c1d76a263f844b84e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in replit-extensions-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7462f6e9b4a4fb60632168e7333f43126c172c42dbe957ea9288df7461840fa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cloudflare-docs-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bbb41f9171f3ad4b1423390d2a5288a5da4ee679c8757975bc22b33c93e63ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in matomo-for-wordpress (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c8b107ba70345ae07ddf2dd8438cf9d9a60d99411ada184085750447149fb29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bsc-allowance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05dca51de24dd5fe00f6891f7a049b449842a8eea930e4ffda9a41b6e3bf41a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @serenity-web/channel-motor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2e1f63ab01642f5ad7bc933a823db954af9d0880bc4ef256f32077a9b89b714 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.js-selfbots-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2aa956daa50889570aeb8de98727c75ac62f6c332efabdcff3dbaab8e43e6aeb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hackathon-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c2b5db7a78bdce1245f6a6eac22c3251fa6bde8775c352c70a7a7c3f1d16bf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in djs-sb-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2be29482d052cda3fe6813bef98ba0696f3311f098fcff6b8e516f252860179e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in users-lookup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a88a9191912d31822f4b70dee7ced6454b97e1c0620c473d34e1855920c7b9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in orchestrationdesk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7c4b49b3a4dec106baa72132f15b7493b62457fa4f2bc0c4bf2ddfe83e58ea9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @huby/infovist-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6a9d9af98833f94e0e3d73a4dc90f662b96da4620bdbacdc5121e08983b066b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vivo-packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ddc60ba6935a3a4569ba5dec15c6cf00eb68779bc86d09178839c459ffb15de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

North Korean APT’s Covert Supply-Chain Ambush

Summary: There has been a significant increase in software supply chain attacks orchestrated by North Korean hackers. Notably, the MagicLine4NX and 3CX compromises gained attention, with the Lazarus hacking group employing a sophisticated approach. They leverage a zero-day vulnerability in the...

Malicious code in areweplayingyet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc131f3b217a186c1278c0f623cbc243ac04894e5fed716f5ecdce60a27b3944 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in immutable-seaport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d0c3932175941cfb3e5c2e6d1807cec6b147c92543a4a46e15833d6fe6837bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...