MAL-2023-8410 Malicious code in discordstream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3801c3a70b5c9331598f373a5ca452e1121433f365c2b75d35db99042e4b995 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8412 Malicious code in shithandlers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c769d824071682d21cd70c7c8f9bba7131817158c02e931df79e6936a241a06a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

HP PC Security Vulnerability

HP PC is a computer product of Hewlett-Packard HP Company, USA. A security vulnerability exists in HP PC Hardware Diagnostics Windows that stems from susceptibility to elevation of privilege...

MAL-2023-8403 Malicious code in sparkonto-plus-external-web-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9649305a1b95b81f5955733ec36789edce326dee3abfec94dc61ab877d166d21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Command injection

The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user's computer. Note: This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox 119,...

MAL-2023-8400 Malicious code in envi-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf29d35387a88f70fb474d1d02435edd91ab0c4f8f482414b8f2c046328b820f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8401 Malicious code in envision-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04e466892f76c4ace03350c7ce2ac6600e0ec4196b1d0bc3dea64be89cf7ffcb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Apple macOS Log Information Disclosure Vulnerability

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. Apple macOS Monterey version 12.7.1 suffers from a log information disclosure vulnerability that originates from an application with root privileges that may be able to access private information...

Malware in @ltd2research/tldrequest

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

E-Root Marketplace Admin Extradited to US on Computer Fraud Charge

By Waqas E-Root marketplace had its domain seized in 2020. This is a post from HackRead.com Read the original post: E-Root Marketplace Admin Extradited to US on Computer Fraud Charge...

HP PC Security Vulnerability

HP PC is a computer product of Hewlett-Packard HP, an American company. HP PC has a security vulnerability that stems from a privilege escalation vulnerability in the BIOS...

Festo Didactic products

SUMMARY A vulnerability was reported in Siemens TIA Portal. TIA Portal is part of the installation packages of several Festo Didactic products. TP 260 before June 2023 and MES PC based on DELL XE3 contain a vulnerable versions of TIA Portal V15 to V18. Affected products of TIA Portal contain a...

MAL-2023-8388 Malicious code in very-bad-npm_uwu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 078725346062db0b0586824de76a4f43cd87402943588aac5406d05d422a4abc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in very-bad-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a68de920d68a5660a228e088d06a7f07cb4d9f30aa94c391e0b8fce37f11ab4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8381 Malicious code in data-kempremium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ffb4f398ace8285093c5eb454687bbc7d7ceb895997acb08461f926659685fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8382 Malicious code in fca-kemdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 287f0297a75a759baf26a653469422f43653a6ccb17b28941f58e54279b623b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8383 Malicious code in fca-kemdino (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 608940f627c10d20f4b58a3eed9bbeba065cd554e66305b171feb7311c5b1504 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8384 Malicious code in kempremium-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0ce69947fee989e38a8cb1396ceaf8b70bd343327c511cf946c8c9f4a3f364d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in data-kempremium

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @momo-miniapp/apix

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...