Malicious code in some-crazy-dep-that-doesnt-exist (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bba7898448e8d4f73d570414401ad6087f1975f5929f72e38815a6bf95c28103 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sherlocksecure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85e527c33befb9151fcf70c58c5d31d5f03792b9767de0f994ded6c6483f75d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oms-sentry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fc10a735991e54e1553bcd8bc1c4041ec2456c5e47cc64291bd5ea3931e5c2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in volgactf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48e462ceb3d8d9ad9d4e861f8e6799066df991e50420b1b5ddc6831cfbe5d4e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @logistics-frontend/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c1071ed352739aa34ab8907b99ce3d1e2e3127a96d8d63b155f3830fd9d8b44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

New Linux-Based Ransomware Cheerscrypt Targets ESXi Devices

Trend Micro Research detected “Cheerscrypt”, a new Linux-based ransomware variant that compromises ESXi servers. We discuss our initial findings on in this report...

Malicious code in ddc-classnames-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e99acb40e304c7529f780536e9e0c06faa3d8e76d23a1d58b7573005c7b92200 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in venzuela-oil (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3628e5ba1cee1c95e3c3635d11bfe56ee88df2f21ecb40de083fd5c7f518cda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodefreaksolivan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 133ebf0daf34723e0fc46632aeb121137a12b6e015c59d4882b9a0fc0298f9b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dontblowthisoff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf5c38fb9ecda26d5c95ebecbd9228db2f2e33cd6075678b149fcd1ed40e7691 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-infra/clinstestpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9960278b8fe842784b23bfe1b25691881cd6b765f159735025d6709ad0ef8dd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in binance-connector-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93212b28c7f6cbfe91b9f34b01f878171260998a13c7f3e1139188c66a49c06a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in adroit-websdk-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e25eae4b9ba41f852f07d6769513bbe90b6bd7e6771c3780f4ee215da20335e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.probuilder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b512f06ed3c61432a9aeb21614cf1cbfdf19bbb3d697a4cf04c999f82b71d1f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in speedy-ts-compiler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e169a7981c2abffdf7307332d399464dd770067c107f40e8a7c7b6c62fe06e3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in loadassh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a16d6eff7d3480c24b394af322fc1b765340f5705f96bf61fbf2473bf1e3432f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in loaddash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4def3db52eeb4485cf65d99250007139f576a4c3291eafa2a3b7d65ba448b9cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Entering a Higher State of Vigilance – Ukraine Under Attack

It appears that Russia has just commenced the invasion of Ukraine. Check your preferred international news outlet, but according to the Ukrainian foreign minister "Putin has just launched a full-scale invasion of Ukraine." Ukrainian airspace is closed with flights diverting. The Twitter Safety...

2022 Cybersecurity Predictions from Lookout: Work From Anywhere Ends On-Premises Security

Lookout, an endpoint-to-cloud cyber security company, have put together their cyber security predictions for 2022. 1 — Cloud connectivity and cloud-to-cloud connectivity will amplify supply-chain breaches One area organizations need to continue to monitor in 2022 is the software supply chain. We...

Israel's Candiru Spyware Found Linked to Watering Hole Attacks in U.K and Middle East

Israeli spyware vendor Candiru, which was added to an economic blocklist by the U.S. government this month, is said to have reportedly waged "watering hole" attacks against high-profile entities in the U.K. and the Middle East, new findings reveal. "The victimized websites belong to media outlets...