Malicious code in @nexthink/investigations-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96c7504109a0c5da8a958e741bf417d560564dc1a8270fb730254ff31f5f79bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-24965 · Oracle · Oracle Access Manager

Name of the Vulnerable Software and Affected Versions: Oracle Access Manager version 12.2.1.4.0 Description: The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager, resulting in unauthorized access to critical data or complete access to all...

Malicious code in tds-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb9cdf5cd3aa4e14d5a628ef37bc7f25bbd6a7976c9c4a2b649a96dcc1c6ee57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ZINC weaponizing open-source software

In recent months, Microsoft has detected a wide range of social engineering campaigns using weaponized legitimate open-source software by an actor we track as ZINC. Microsoft Threat Intelligence Center MSTIC observed activity targeting employees in organizations across multiple industries includi...

Malicious code in flipper-plugin-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d0ce77de29c719770f78a2ed8c4c02eef1838754428ba47fa797d900c8fe2a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sn-par-select (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2115af5e8c7f88004a13cc3253254769c561db84c32bde740ad847af36431692 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in luajit-stdlib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45b78e7ade789bb8def418f760cb87a5ee7cc0bf5135ba824d6de5872ef369e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-canvases (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b82bd1049eebd0f7241e2e25c27fc0cad73ed8d0dcb0e4873400900e78aca350 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testdir12345 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9495556846ded2e31945f35514295ac0e4d08659ae81b7dfa225a399fa3522e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dc-test-jq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfd0f813c9a00e7fa7804deeffffa87ae75cfebcc7a9135b5d2bdc51ff38a473 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @arkadium/eagle-user-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7a1219186b72612034e596232352022cd3f3e5eca9f1f4bd2e4787909d4aa9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in logging-inc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca24435d7a32e57c6147e074584cc772197d3b7a48db6ea6c2e05c8983f3a37e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v976 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 089032be9e92734c08b2dd870e040ee39765250dca7f3366b97cbcd8cd7fcafb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tetstetegg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 487d0ce2492eb69c769913d8e9b912be506bbbf5a8e07362a711257ff73c7a31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @himmuhimmu797/lock (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f73221a62770c3ceba3a2b6cca52d665e40a8b372a68684c97812e5443999cfb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node_resolve_index (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a1ceae10597b78717c9ec88f3ff2896ec117126cbd5a43968948da49b8870ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in www-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0115c38278defb9aa6cc167113c9895685e34e978da37c1337e2bb278abf8050 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in docusaurus-plugin-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 232063f9bf78828e30e0c8bb7374c02a90b0a6bf29118093c955b5412deadddf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in --no-audit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 649eb0d2d0ee5a8de3b866728e219596fac64a483a2e2896498457b7fa0a844f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in h3-jsv3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e53007d84b93b71d7e615edf57ba81b6ef6e5fcdf194395afdf4bdf9ca5f9b69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...