Malicious Package

Overview epic-am-ui is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview epic-games-self-service-portal is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

Malicious code in epic-ue-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42ac396111cdac73dc3a39c9ae1f531ba8418435a8a6ef8e7c093d9243ca682b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2773 Malicious code in epic-ue-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42ac396111cdac73dc3a39c9ae1f531ba8418435a8a6ef8e7c093d9243ca682b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3844 Malicious code in init-epic-link-multiselect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3034c2a4a413d05090716b1944806f291ac0dc48a86d8650c67cf39f882b37a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epic-mod-market/ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9557b93dde2494ba6b854682ba2199a434d8798a622962aae9dbe9ee82027fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in epic-games-nav-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89ce33089fba4396e9b6cd666e38c66a0e37f6bffdabe1d85aae83c9d53a9cb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-250 Malicious code in @epic-mod-market/ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9557b93dde2494ba6b854682ba2199a434d8798a622962aae9dbe9ee82027fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2767 Malicious code in epic-games-nav-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89ce33089fba4396e9b6cd666e38c66a0e37f6bffdabe1d85aae83c9d53a9cb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epic-mw/localization (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a02d41f96074f4eb8d18299277cd8de53b91d344bc012f910e70d55b75f60335 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in epic-ue-themes-la (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dd6b1635c8fd79c366882517043249a5f5f29688531b8a26db7a8cf43a43671 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2772 Malicious code in epic-ue-themes-la (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dd6b1635c8fd79c366882517043249a5f5f29688531b8a26db7a8cf43a43671 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in epic-ue-fonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7979dce3b3be977cb7f1e59666ccb211221329338f2d557e5f30c3427a98503 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2770 Malicious code in epic-ue-fonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7979dce3b3be977cb7f1e59666ccb211221329338f2d557e5f30c3427a98503 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in epic-games-self-service-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6501b1f84db73620714317259c6392ca56fa12e75e553ad8303ddeb8e0eabdee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2768 Malicious code in epic-games-self-service-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6501b1f84db73620714317259c6392ca56fa12e75e553ad8303ddeb8e0eabdee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in epic-support-prettier-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56deb20b56f88f97b545096c3e158cb4708ada1984eac27f01ae315deb0fc0b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2769 Malicious code in epic-support-prettier-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56deb20b56f88f97b545096c3e158cb4708ada1984eac27f01ae315deb0fc0b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DEA Investigating Breach of Law Enforcement Data Portal

The U.S. Drug Enforcement Administration DEA says it is investigating reports that hackers gained unauthorized access to an agency portal that taps into 16 different federal law enforcement databases. KrebsOnSecurity has learned the alleged compromise is tied to a cybercrime and online harassment...

Threat Source newsletter (April 21, 2022) — Sideloading apps is as safe as you make it

By Jon Munshaw. Welcome to this week’s edition of the Threat Source newsletter. If you pay attention to the video game community as much as I do, you’ve been closely following the ongoing legal battle between Apple and Epic over the sale of “Fortnite” on the Apple App Store. I promise... This is...