MAL-2022-7381 Malicious code in zen-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd12a62adb95a21285708de95d958a6a2daaa6c02805c7d8e455eeeefa01252e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5632 Malicious code in react-bank-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff5553f821ba524b88f457343bcddbb43c844774492bf8fdb955996520d7b417 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6867 Malicious code in usersnap-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 140e06dc6a2c85745fd289c10aaec31b2eddb660a5ad1622b30cc579b5a9235f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3624 Malicious code in hhsoig-design-system-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6eddb59217f47a78b222ed1d9603a8c53deb0722ff2700f7cfa7c57db216e382 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6884 Malicious code in v12-discord.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 771330c094d04cbcf6c83d88eebc212c196e01bce4a4c076a6e62a16a6bb87a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Prepare for a New Cryptographic Standard to Protect Against Future Quantum-Based Threats

The National Institute of Standards and Technology NIST has announced that a new post-quantum cryptographic standard will replace current public-key cryptography, which is vulnerable to quantum-based attacks. Note: the term “post-quantum cryptography” is often referred to as “quantum-resistant...

When good-faith hacking gets people arrested, with Harley Geiger: Lock and Code S03E14

When Lock and Code host David Ruiz talks to hackers—especially good-faith hackers who want to dutifully report any vulnerabilities they uncover in their day-to-day work—he often hears about one specific law in hushed tones of fear: the Computer Fraud and Abuse Act. The Computer Fraud and Abuse Ac...

[SECURITY] Fedora 36 Update: golang-github-client9-plaintext-0-0.8.20190703git5bf47e7.fc36

Extract human languages in plain UTF-8 text from computer code and markup...

Metasploit Weekly Wrap-Up

SAMR Auxiliary Module A new SAMR auxiliary module has been added that allows users to add, lookup, and delete computer accounts from an AD domain. This should be useful for pentesters on engagements who need to create an AD account to gain an initial foothold into the domain for lateral movement...

MAL-2022-6558 Malicious code in thisisourgoal1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bccb974d5583b8e7f44d9f024a4b9dc28841f833b8b766b72cda46fe2802619 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4492 Malicious code in material-ui-plugin-styles-provider-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c532d2260b90e64adf2ec199da8ee4d191a0c4803afeaa57c2327d49db0c6969 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-51 Malicious code in @3p-future-solutions/ember-cui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 397fc341835af149d910a487918b036cb2520795441767e7953264ec9c8a86d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1915 Malicious code in cleansheet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16c336fdb150ff783eca4ce31fd4ec23e6982aa39e2b53ca247c56d46215f159 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5526 Malicious code in purple_team_midway_cenario_1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e78d943ca5c3b25d23aef36ac8b32d6df51c114bcae3b18f06ec806927f3bab0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in purple_team_midway_teste_cenario_2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28934a167292330b02fcc17d36240c4fb6daef5ea6ca4120f4ba7e10b7f53b3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5528 Malicious code in purple_team_midway_teste_cenario_1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0da74d83112d47ea6bda3eedd0cb4f78fb0fd300a9e57fc9bb567c4e97e8c320 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7082 Malicious code in web3-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5faeaf5e592fa854a38c5ee80aeb77b40c09f82cd8fbdaf7fdc37f6b095cb3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6374 Malicious code in swaty-color (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 749dbce98e920622a098d9bf119a167053ad8bcfbcacc9838bc509a856a06a7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c146c526c66a3c80811bf92b8f1da86f88043871d8d984a5e4cb54aa9af263c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5783 Malicious code in rhynocallbackpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bee8048e72c9679df98896285ceae25c5f6a747569f659b6aa8aeaace5237ee7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...