MAL-2023-426 Malicious code in fca-tpk05 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e686517998e98824fb4c4bde8bf891215eee0f0274b60fe8d5620402ec1953b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-933 Malicious code in velo-external-database-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9c7e720483399030f4aa6ca225732c8aab633f862302071086c02e3d990993a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ethical Problems in Computer Security

Tadayoshi Kohno, Yasemin Acar, and Wulf Loh wrote excellent paper on ethical thinking within the computer security community: "Ethical Frameworks and Computer Security Trolley Problems: Foundations for Conversation": Abstract: The computer security research community regularly tackles ethical...

MAL-2023-942 Malicious code in vpro-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7799537e27ebbb40c248b3be22aca53aaf7d03bb8caacec55ff74194ee411a66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dow-load-stepping-stone-the-stone-series-2-by-dakota-willink-on-mac-full-volumes- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0f0204307cd5527d985b8b4ac7acbb11c80f489f7cb9f6765cf4c5e6cf2de20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-870 Malicious code in the-great-passage-by-shion-miura-on-ipad-full-edition- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc6059821330a42297e793c18eb3cfae527b38b35d3c5491f5f0dd6e9eb2f5e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-865 Malicious code in the-best-we-could-do-by-thi-bui-on-ipad-new-format- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69c217d4c0500cd572578b3d4c2668c30df765a44d665c8eaef5b3906c09ce73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-114 Malicious code in auth-test-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb18aabc5749a94ac657ae109997f03bd170e42c876bd450cc0bf43ee32619cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-726 Malicious code in react-microsoft-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebbff8e8d6bc53549d890642e4b9625f2177839bdd586402e12331a2d22f9a6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-226 Malicious code in dash_cam_viewer_serial_107_c3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d04e5ee2fdf2ae08e390b842fe8c24fe2bc3f0152496de84694bc95ccbcde01b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-17 Malicious code in 3a-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx bbd096556ffc90070942d3750f4d790cad77115f15c0e3b8aec5d6788bc817d8 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

Researcher Spotlight: Giannis Tziakouris first learned how to fix his family’s PC, and now he’s fixing networks all over the globe

Giannis Tziakouris had a problem growing up: He kept breaking his PC. He loved experimenting on his familys home computer, but things didnt always go as planned. Thats when his dad told him he had to learn how to fix the PC and get it back up and running, or hed revoke Giannis computer access...

MAL-2023-653 Malicious code in omnigodz_testpkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b71e35f587d48902bd1b3b26de78a66c82c7f28faf7e7d339b607497d40cc318 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

3 tips to raise your backup game

If there was an award for "most overlooked really important thing in computing", backups would win. Every year. So let's put that right and spend a minute or two thinking about backups. Backups are great! Having backups is like having a do-over for your mistakes, and who hasn't wished for that? A...

sum.com.tw Cross Site Scripting vulnerability OBB-3242729

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2023-663 Malicious code in owa-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a60a11fa8007678688a3a358a3af447fc85b65c2358d8799dcc1916f7504c7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-419 Malicious code in fca-sang-remake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c5c8aca49062d679b17dbd133060c8466e8bd81a14cccad4ef8621a0fe435b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-645 Malicious code in object-color (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c020aef40621d4925ef4f889be72db32fbe5408e09d1492bc4218b726174c3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-0104

Weintek EasyBuilder Pro is affected by CVE-2023-0104 (ZipSlip via decompiling a malicious project file). Affected: v6.07.01 and prior, v6.07.02.479 and prior, v6.08.01.349 and prior. Risk: enables attackers to gain control of a user’s machine or access sensitive data. Mitigation: upgrade to v6.07...

MAL-2023-560 Malicious code in kuna-chart-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7b6783077178ab41482bc0e611e487453d9b0254e1e1ad5684b89472b002b2b4 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...