Malware in discordd

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in discorddd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4843fe6e7451a467d24bf9d44860ca2ba49c8039973ec393ec9ae10c6f68c9a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oy-cms-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2be7374107b4ac9e28374ee29999f89a1644a7e262cf175cbd223a15958025f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1047 Malicious code in @oyshoweb/front (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc793cbc35cbd69fb4c7bbb4873d0b7a480c013daa6e004215c2455290cab3e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Improper Authorization

chromium is vulnerable to Improper Authorization. An attacker could exploit this vulnerability to impersonate a trusted website and trick the user into performing actions such as revealing sensitive information or installing malware. This could have serious consequences for the victim, such as...

Improper Authorization

chromium is vulnerable to Improper Authorization. An attacker could exploit this vulnerability to impersonate a trusted website and trick the user into performing actions such as revealing sensitive information or installing malware. This could have serious consequences for the victim, such as...

MAL-2023-1058 Malicious code in infocaster-frontend-bootstrap-4-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c55745943f07b53663bfc73b3b50663ca02b9b94e8897b082272ea0be460c533 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1048 Malicious code in discordd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97c4e88528a7231605ac5b8ffbae0eb705d1b7cbd05d44bc72f4d26f6b7db7fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1052 Malicious code in my-fallen-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7c1f73f0c85f62e81e5bb2b99f08089c34ecaa76487bac79f482b75c131ef13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1056 Malicious code in binarium-crm (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0319a4b526e85c3f33642aef37de9fb6a431f79dc995b4829c1bf12b854d8721 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

Hey, are you REALLY ready to go on vacation? (No, you aren't)

Are you ready for a challenge? A real challenge? Do you laugh in the face of shark cages, scoff at the Marathon des Sables, and waft a dismissive finger in the direction of the Everest ascent? Are you ready to conquer the impossible? If so, then you might be ready for the ultimate challenge--taki...

Malware in @kennylindahl/malicious-npm-package

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Hacking AI Resume Screening with Text in a White Font

The Washington Post is reporting on a hack to fool automatic resume sorting programs: putting text in a white font. The idea is that the programs rely primarily on simple pattern matching, and the trick is to copy a list of relevant keywords--or the published job description--into the resume in a...

Malware in command-launcher

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2023-1029 Malicious code in bluehost-wordpress-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 130f9a8e36740fd2a40d384f49218d898cfa0a619be16a71621770c1eed31c15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1040 Malicious code in testhacknowz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8e35447833146cb97e01cbf36881b7d380caaacdef83cf1e276f822b288284b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flot-axis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75e800a2dadaa8f5d0ac8a5db1564e97a702c66176c2da0c537191d88cf8fc81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1036 Malicious code in hackzvijay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baa21bf2e50d46d8e86793d9a3b251a8fa8a72c0d1ca1086e4f68817a48a9d6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in coinbase-wallet-sdk

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2023-1033 Malicious code in eslint-plugin-scp-custom-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8860b8044f2adb9c969cdcf764976c8f9e110be9d0b0a03d095998595aec3938 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...