MAL-2025-2174 Malicious code in grafana-resources-exporter-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32638374c532240fe824d5d3467c0adbbf3fc762b0efc727f36fc93271e9933b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2166 Malicious code in base-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d3a0ef4f39fc5d654899b1e04fe0737024518e969f56ca4d409ff2822a3bbb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2165 Malicious code in async-query-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c182fcd486203b0e1bcf7d1677e5b65105252c5d88f343b159e8dec92e0c772 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in existdb-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ae58cae37f287aa42c1834fad59134abd2626470c5367777e185a57a36bcdc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-unzip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd99263d19f7c6599d64abff02934e9d436d39de9b4b3c4f1d3984ccb85956f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2170 Malicious code in existdb-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ae58cae37f287aa42c1834fad59134abd2626470c5367777e185a57a36bcdc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internoapi-rota (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d84c6849691da5c1f0270f57cddc046492fd8d01cbb769bcd9671d121c82e78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2175 Malicious code in hookform-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c03aa7176706f7dee9f4c1c8f7c4d645d4345a2a47865b7924eea6e8b47a8101 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in alexpavlov--jquery-suggestable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f4773aee85f3d282a89ee413b5af4e93365981f67b821882709daf1d3cc6eac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jquery-suggestable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74d4c0f43329dfb6b2d28c85a573a431135a5605521a110c3867f8f3df909cc8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2178 Malicious code in jquery-suggestable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74d4c0f43329dfb6b2d28c85a573a431135a5605521a110c3867f8f3df909cc8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2169 Malicious code in edx-monitoring-only (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d47b1fbec9c47eee15eb0547c1da8cc774108bd7cd6ae38a51cbe4dbfbe74941 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2196 Malicious code in test-hahahaha-rce3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ce7e808fea7413db7d10b8c0607e5f0dd67c2457b07927a33cfd7e3dd38b287 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2194 Malicious code in test-hahahaha-rce1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a18b76d33491e814707ce726adfafe10db9ac7b492d3a76713d3f0ade1f5ef3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2195 Malicious code in test-hahahaha-rce2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59d51a9f44be7e0cad42ebc638eb04be0e5e9b52503c0a61c2d1561e530de991 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Get NAA Credentials

This module attempts to retrieve the Network Access Accounts, if configured, from the SCCM server. This requires a computer account, which can be added using the samraccount module. Module Options msf use auxiliary/admin/sccm/getnaacredentials msf auxiliarygetnaacredentials show actions...

Trojaned AI Tool Leads to Disney Hack

This is a sad story of someone who downloaded a Trojaned AI tool that resulted in hackers taking over his computer and, ultimately, costing him his job...

Malicious code in testaaa11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee9af0a167a9449542aeee6148dd5d89d3f9e387e437198cb1a5a3b99e074fd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2089 Malicious code in amis-widget77777 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d942d0ef0acfd81130cbd80a7296143bb7e3fd2bd08430bdaeefddea85c72c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2137 Malicious code in v1ue-custom-widget-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f7e56b04ae3ca44fba371adba340a3933b9fb3e7899bc2da0a2c868373970b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...