MAL-2022-6632 Malicious code in training-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44bbe764b3b73581dba9c264aa6db75d4b286daae4495b94f91722aaf4167fd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5480 Malicious code in promofline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f29bdfcb101c1a86b1b7da10ff12cd688cb0fdc618551cf8e955022a71558448 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5756 Malicious code in require-jq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7305f50f59db220bfc80a952ab5be573b7d70d3889f37f817d3ef9af46c3c66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3972 Malicious code in isq-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba4d1661e1b74f3fad2853aff9cef3534659d4c2541685196c32bcd0c4a5dd24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1091 Malicious code in arketype (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a65b8bf7ebb5126c079c6d1ece79d36368a76942e0e32ea72d1e197044bcd93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2582 Malicious code in dpd-returns-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6ef9bb6d12034b7105aa8e0bfc2ade917b80d7c6fa5f5aaa625cedbe7e3c3dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-506 Malicious code in @platform-apps/platform-ui-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8340f5601369b70181bf04a82752c94b2af124e29918d5724abbd93dabfbf503 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-6145 · Abb · Rmc-100-Lite +6

Name of the Vulnerable Software and Affected Versions: ABB RMC-100 Standard, RMC-100-LITE, XIO, XFCG5, XRCG5, uFLOG5, UDC Description: The issue is related to Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' and Improper Neutralization of Special Elements used in a...

多款ABB产品路径遍历漏洞

ABB RMC-100 and others are products of ABB Switzerland.ABB RMC-100 is a remote modular controller.ABB XIO is a microprocessor-based device.ABB XFCG5 is a differential flow computer. ABB RMC-100, XIO, XFCG5, XRCG5, uFLOG5, UDC A path traversal vulnerability exists that could allow an attacker to...

MAL-2022-1828 Malicious code in careem-captain-earning-experience (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f77f596f64dfcffc26baa4da9e2fa7da045133440eed8cbd593d3b5cad2f3e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-977 Malicious code in amplify-category-api-e2e-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12a35d0a8b1a0a8aec5fef2c0e459f6151837f40572441aa6110a0d5686cb858 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7191 Malicious code in wm-cookies-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d538066b0051af1f54e7f610555a094887e4cbe9703bb8c4276cf979e0d3230d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in html-live-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18cdba0865437fa8c8cb2d37623793279a392fea573039901a81de40f72d3b63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3693 Malicious code in html-live-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18cdba0865437fa8c8cb2d37623793279a392fea573039901a81de40f72d3b63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3808 Malicious code in indy-vdr-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 100d7d507e1de15d089d8a333266fbd1c2a02baa06348b81ee159fd787510d38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-68 Malicious code in @alice-bob/com.alice.adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90cad1ecdb82a3b682d758bf5ac96c012458d22c4632d480caff86f1790a207a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in remotepshell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90f0664f69bb83ec074fe455f3e75065d195dc09acdd8e4cd4947001b21fe9dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hwzpgf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9dd3a02aac35fb116e38063fb226a892d9f04b2a04a31b87ed32958adb247e7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3729 Malicious code in hwzpgf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9dd3a02aac35fb116e38063fb226a892d9f04b2a04a31b87ed32958adb247e7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

NSO Group’s Pegasus Spyware Used against Thailand Pro-Democracy Activists and Leaders

Yet another basic human rights violation, courtesy of NSO Group: Citizen Lab has the details: Key Findings We discovered an extensive espionage campaign targeting Thai pro-democracy protesters, and activists calling for reforms to the monarchy. We forensically confirmed that at least 30 individua...