CVE-2023-0104

Weintek EasyBuilder Pro is affected by CVE-2023-0104 (ZipSlip via decompiling a malicious project file). Affected: v6.07.01 and prior, v6.07.02.479 and prior, v6.08.01.349 and prior. Risk: enables attackers to gain control of a user’s machine or access sensitive data. Mitigation: upgrade to v6.07...

MAL-2023-560 Malicious code in kuna-chart-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7b6783077178ab41482bc0e611e487453d9b0254e1e1ad5684b89472b002b2b4 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

MAL-2023-26 Malicious code in @bingads-webui-campaign/facebook-import-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21a5691da486b64faecd5c39157f18324639cdaf8a357094a80ef7088eb6c34c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-232 Malicious code in deobfuscatorv2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c1e176e65ad21fbd16a057338f01560423427a7c78b473d94ae700afc4fc171 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-150 Malicious code in bykea_node_boilerplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee7671f75f343e3ed72d88d13441eac9e2269d6399266b79952a9a1e9b25a25b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-829 Malicious code in tanker-ts-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 522cf4fc46b1f24355d942f42a20f8981bf0b260bec099157b4dc2a11f14074a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-797 Malicious code in speedtestkas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8836f24997a907538aecb95c00484874123e3c82cfc14af5aa48eba61723a6c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-796 Malicious code in speedtestis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28c743a96167f36c8645c17cc973c214e9917149cc43cf1c45ddd97e6219d783 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cas-core-renderer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26d20be8c341ff87fc8ce4d2871dea36d7e1f5d778de7bc62e991d54c73764b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1883 Malicious code in chart.js-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 158452cb65e1829f3bef9dd60011e52b0aca5ec322724ea3adfd9cae286a3f79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6239 Malicious code in sponsor-jobs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ff91cd8369dec7dda50c1d1b495256642f2f035c7789c5f99a6520094deabc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5180 Malicious code in package-ions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e0094ac1543c12617313ae835b10879ec07d454e4d60930d6a8bd7589ca9f0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1024 Malicious code in antiheck (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57640d463cf1be529df1b989b1c6b6c7c70485353571eb06099eaa9e99fcc842 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3609 Malicious code in hemoabsihh12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c1524d5e77b8e79cb5f3d0342b2b398e0ecf4c7cd1f03b7e90e6e2e0b166b33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4052 Malicious code in jquery_ui_checkbowwx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 355813cd2a93a9e682c5c08d18c2a94a88961692b4d92bb41d931a48b70fcfb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5773 Malicious code in reviewstack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 130d9339d26189f3ef5b6a77ef657b20e163fe7d4698d7631189150ba226a4c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3561 Malicious code in hardhat-modern (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 364a19411c6fa78338bfd1eb9f6987f560554219e531430448430f84c4ecb947 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1087 Malicious code in aries-askar-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec7e85602fc5ad6913bd9bd909f95910a70ba3e3334f0b5f07195924ba097479 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

An odd kind of cybercrime: Gift vouchers, medical records, and...food

Someone with a gift for technology but a nasty habit of using it for very bad things has been spared from going to jail with a suspended sentence. Peter Foy, 18 at the time of his antics, racked up a remarkable, and slightly peculiar, list of compromises before being brought before the court. A...

MAL-2022-456 Malicious code in @nexthink/apollo-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware faa168f6a74af14b39193cdea04f9798ab2d20f8ad531d396b5207580e9fc5b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...