Malicious code in wlwz-2312-0106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af95d3ae53a571c4ef941876399b080c9368317453c5a9b0864d6f1efea38bf8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d122fcf9d844d0750d5b9f417dc03ea3f03e16387655de0ee8692050b506c040 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-238 Malicious code in wlwz-2312-0705 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73f3954b573d83dd29c8986e3c1ba516c13334ae09ce7a131397594793f4eab0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-0103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb9870f8bf154e5ec1dd005aedc7dee4c506c5caec3252b1f72f13e5760261be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7006 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a49ea2d48a1399c3f93699ef1ea24eae7f5c4c436da7d8e049b472583780068 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-2000 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 470f83756bd0e14995c93ce4a19672c8af2854f0d9d1ffa7d80a7c79abd6e262 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2311-5600 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b11d2225504316c6ba5d94d64e0cd25351c0db51aa106188ecf04a58004ffe0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2311-6208 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 697d158d5ab8fcf534374358bc3929b95bf31d131f987c186c073e2f081c9b59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.js-gothic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 273a606f7db6fd2c9266d51a4e60e10fd2ec43e90ad4df3c711397e15d4b42cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @shenmue_dsc/shenmue.js-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41741ce46c179a00941cfeaddb00888355b79c723e63e36f44cad7b82a2d258a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Gssapi-Abuse - A Tool For Enumerating Potential Hosts That Are Open To GSSAPI Abuse Within Active Directory Networks

gssapi-abuse was released as part of my DEF CON 31 talk. A full write up on the abuse vector can be found here: A Broken Marriage: Abusing Mixed Vendor Kerberos Stacks The tool has two features. The first is the ability to enumerate non Windows hosts that are joined to Active Directory that offer...

Malicious code in oscompatible (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9569a20b29ab9fcf758c7fa43268c1d1d42034ef4b8d06ec9f234e008e27d54c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in naoi.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcf0307e98284025a436e760f0317cb5220a08fb0c7504e71100986c95f7245b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in noleakdmall (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2bc9f62148f8417bf5be1b0b2bc56a7f279b99ab37d5cf7a9c3594278020fe6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.js-sb-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1bbed6f3d435dc4be260e8aa0a12788635f71cb76f5ab2666a2789e62e1ddedc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in automation.samples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a774b4130cbf36652fae63dee86aee2c0c60eeb25dd5be05dbe22c5a2dc1eab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @linesearch/swiper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bf049c370e7e561754761d16016b5184a0b073ee8d521bbd4f23df8f129a417 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Redfish server of the storage manager MaxView on industrial computers SIMATIC IPC647E, SIMATIC IPC847E, and SIMATIC IPC1047E allows a perpetrator to gain unauthorized full access to the device.

The vulnerability of the Redfish server of the storage manager MaxView for industrial computers SIMATIC IPC647E, SIMATIC IPC847E, and SIMATIC IPC1047E is related to errors in processing input data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized full...

Malicious code in cloudflare-docs-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bbb41f9171f3ad4b1423390d2a5288a5da4ee679c8757975bc22b33c93e63ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in metabase-enterprise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36f82ac275d8bf6e50d44d5e69c1e30d070cf24d267d105aa88b8cf287583b43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...