Malware creator who compromised 10,000 computers arrested

The creator of a Remote Access Trojan RAT, responsible for compromising more than 10,000 computers, has been arrested by law enforcement in Ukraine. At the time of the arrest, the developer still had real-time access to 600 PCs. According to the announcement, the RAT could tell infected devices t...

MAL-2023-117 Malicious code in azure-sdk-fly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab63a2e65735bf69a56d323b1f5f75f5a931d4eed13e9fd4468e38047adb773a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in core-site-speed-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1583a2587d4a117d6dc59133fd52c7c8da04f57cd6265a159e8c50da5e82d8bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hardhat-web3-utility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b492c5ccdb582dd43eb84cd6e87f55f91de39f0367ce38fa7426091cbccb908f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-637 Malicious code in nokia-smp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2dd16f41855f78df40de39f97e0b9724df12d2b0f4caca18025ec16150be4a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-909 Malicious code in tsang-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b349833c412697b8091d1f61d201e3f3d2a4790697fb032342d7cf857782bbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-252 Malicious code in discord-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01cbf37f0e61d41e10843d3b280789374dfa85d1d07218a752b29e0bdc040e91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-537 Malicious code in jquery-mask (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60c2e86401517688fc0bdbd68e989cce56834a9c11090e0a27fd0e0b5cdf9ca2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-534 Malicious code in jiser-sp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2bd3e25c3ee0d6a560720ad7cafed6839f4aee3894b4cdcc4514631dd6fa4b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-461 Malicious code in fronton-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d44f273938402bf07c8942f200cf613694ff6b357a5800e67b88a47dc620f019 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bolt-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e0e9750641b5f610dba33e939ceb6e12c2ed20c08c5974a909f7cdfc113f515 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testben (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 833130b8bbb5cb8b0705bc8d861e7765483f6efcd15b6f36887e55042df4aeee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-217 Malicious code in cryptotickets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1dc5532ae9f4b871ff1eb941c8f25adc913a1fe9d5ea089bcd486887b2a7c19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cryptotickets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1dc5532ae9f4b871ff1eb941c8f25adc913a1fe9d5ea089bcd486887b2a7c19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-894 Malicious code in tokenlon-v5-subgraph (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dceb07244c9168376047cfb891dbdf3048a9003f143fe5e73fad62a14471057e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flip-flip-flip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 979398f3d7841429ee6d7d3243443012ce40985d7f58183ef86e4cc17f6b648f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-914 Malicious code in twikoo-magic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 808d64256118ccefab7ddecf052e3978523681777e309d786a03e1c2974405a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-718 Malicious code in railties (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca2a029e076b6bf6c3c47bbc29d4df637c7e966d91a4e95f196e4178397daf1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pxt-arcade-sim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d8c72a30beb5660a4ef7bc4ad2831a1aac167e41d4f8d7c2fab5e1e452e5ae9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 485827dec64675d8b8c4a64d0bf306ead2d7150e75029c3eabde32bf47800999 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...