Update: CVE-2024-4577 quickly weaponized to distribute “TellYouThePass” Ransomware

Introduction Recently, Imperva Threat Research reported on attacker activity leveraging the new PHP vulnerability, CVE-2024-4577. From as early as June 8th, we have detected attacker activity leveraging this vulnerability to deliver malware, which we have now identified to be a part of the...

Malicious code in aws-logs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4707229414d50f1284c7a7b64169463a7c7ca779faf42df6b059947dfd1b79eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vue2-webviews (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95a66e858fcc284e27c0e0ac5e2d76de3b0f6c670ac21a185369832d45f40f5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CGA-CCCJ-2882-734J

Bulletin has no description...

CGA-CHPW-HXJG-PMQ9

Bulletin has no description...

Malicious code in glup-debugger-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5001b44290fb031aa2d19602d8706fe384823c3fd0a2a02dedb3bab957d93f07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Windows component for working with SCSI devices in Windows operating systems allows a hacker to exploit their privileges.

The vulnerability of the Windows component for working with SCSI devices in Windows systems is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Malicious code in win66lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ef7e6b9c91af7d4a4e2199453260e026047e3029e2d8cc795fd530f1e6e1e8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1525 Malicious code in test-lib-avishek (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b09a9d57bb929d0c7ba93b90c01ea2a5270838a233ae120bdade2730d5c6e364 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1522 Malicious code in random-avishek (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02969e3f79ab835099da7fc1ca720e01142e1d7c098b4021ddb45930af85f11a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1514 Malicious code in developer-integrity2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87499b0a5443852246ee964cc3d558e39a3f77a688484835c1e33524e1c6fce1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1518 Malicious code in npmnewtest-avisheknayal1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47030e6175929e7c1b3ce525879579330acf2aae6c6dcdc18c0e52956740b628 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1521 Malicious code in pkg-lumina-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd7ac6d227bb951e00656b9768230c146f3be307af9f71cb484a398b72132ec0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1520 Malicious code in package-delete (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 522d550ac171fd1be4e4d9cb5e0dcfcb7235e4de8417a758c82bb20b58e345f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1513 Malicious code in developer-integrity1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24aecacebeaf253088760161715d22f5ff77c66ecae6b73d9d1a9b984bbf8de0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1510 Malicious code in demotestsample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81deaf8942b0c1f252d8e518570899524ba93df16ac9a9d325cb4a0dbafcf4f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1511 Malicious code in demotestsomple (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8dbeccc2890d5f7785a90de29180afa07561f96abb9a3cfa761b8ca0f2c86b7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1508 Malicious code in demo-sridhar.com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76211b004075aee6d23e4dbc2b6e2bf8e413a93072dfe370de9c19dcef6e845d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1502 Malicious code in @juiggitea/voluptates-illum-consequatur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d3af320e35bc7eda0120f2303317cec29bd15913b6bbb745b1a71c5f4044603 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1506 Malicious code in command-injection-avi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e54fd75c755589d5d22d320040508b52efe2fbce858fb0d335c391c2de86df60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...