The Truth About False Positives in Security

TL;DR: As weird as it might sound, seeing a few false positives reported by a security scanner is probably a good sign and certainly better than seeing none. Let's explain why. Introduction False positives have made a somewhat unexpected appearance in our lives in recent years. I am, of course,...

MAL-2022-488 Malicious code in @ovh-ui/oui-criteria (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38e3daf3c161698ccb8c483181d0dbe53aa407f9df0432620715dcb668c5c093 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in etherscan.com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e3f0c8112f9a52bdb44e06488dc15dd9ee10e687cf797eceea74f7732565473 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2694 Malicious code in elementor-developers-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 856011d4e71685a5eaec4b1259997ce84cf85c10bc5d5a64bd6a9f5bb86c0175 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-259 Malicious code in @exnessimus/hooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce3949c509aecf530ab224e6627260a41b8cc0ff59edc392f8820a7dfd36bf0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3769 Malicious code in identity-dev-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 375e8519f221cf31732a3293866f4b54b93edb90ba7179ffca4d4944343e9850 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3057 Malicious code in fitbit-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e244db8536c3d0ac70e9bec071e9b946ec7553b566cdc6e031d9bb3cd17f042d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7132 Malicious code in whatsapp-landing-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6dfeb2e9b7018dd0e4d3c0b412ca067d8db34afd80fe1974702b9c96969b842 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5973 Malicious code in sdelements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d959a5924e7a3181d03a32add680e07b7e1d6acbc0d1aac8bdc3d0711a18271 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4222 Malicious code in kqptcsuxewfkmazi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e13bb94cfb6b9a405d6c80b62939963a35dbce658efe77189c425db83305822 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5308 Malicious code in pflgydevkbxamquw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9e710dbb7a495f1b1dbd03d92a8efe8e1d3a9550995489a07b93c0f2b10a0f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4178 Malicious code in klomsfbeixcrwuhn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd26d7625ec7f17ba113575e0763ceb0ecd64d9ef7610f9ac0cd48806c4d51b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7291 Malicious code in xowtslzpndvkfrgk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83c2aac25380c5c211cd9862ee0ed9a7c79dc79396b10169b8a56d0302bfbca1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7405 Malicious code in zmodfqbpcyijkten (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49c90fde7a576c3e235041a9543814346033e7668e80fb39f630bfd87e97cc53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4980 Malicious code in nuyzqmvihbpkcdea (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2db00d910ef3959080dc7683b97b5e2c592264cd292ef9d2f38e3799929f2bc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4953 Malicious code in nqbcksuatvlgpkfy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 462f43c40286edf3abdbd7fcfb8ef7e6ddc6e10f521c0ebb863a5384014f74c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5115 Malicious code in oqsagcjwylizkkeu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02e23a65a699e8a3e50774253a6a5272c53a8adc03d872570866434b38ea7a99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3384 Malicious code in gkvlwtoaufqdhknb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbd887b92f5984431bbe1fefc0429e017bc98c7ac14ce13904e6f7224eac77bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5623 Malicious code in rdtkfuhjacoezmwn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 896e42976dc1ad1fba1ff67cc159f4590dca8c57e4015db7289dd126b8e1269c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2885 Malicious code in euvpiokkxdhmzwaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49df66418c850683b95610386943a2bfa894fdc827643f67309e747285ac0183 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...