Malicious code in @manomano-toolbox/pim-management (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd08f90f97f53d7b76dad3a2a10ed8031f6af87a735ea7bfeb12bc0290aefb4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in misk-web-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b30cdf42b390fade729b29ee9371cd54ab7a9fa1e59b1595ffaf83f1ca153d66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ual-reactjs-renderer-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51f103cbd42e4c8208e6cc75f422cc09ce4766ad160032a8fbd7529826851757 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in atlassian-sketch-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 127fce48a3621d82c27eb14ee5dfa2aa7084e2b7c2cff9fe775be9063948f9eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yoti_2020 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec41fbfb14efe2e116f592623716f4c4a245d5a7c0a1b58913cef95948e649ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rkpacktest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64e155982820eba462dcbfa1616d8d13143172fae3248f9487a1d66ecfb674aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @commercialsalesandmarketing/contact-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1e61eaf68c0708ce952ccab5bf707f36175c24e35f12127a74b04dbbf0cfd45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dontblowthisoff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf5c38fb9ecda26d5c95ebecbd9228db2f2e33cd6075678b149fcd1ed40e7691 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1929 Malicious code in clinstestpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6575bc8b9c9df76806967bea87397ecc8df21860f0a7f91b4e5a8ffc317e8db8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-infra/users-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf73169208787ddafa275f2837c6596a96541a2c4b1526a4cdd468678bfa4e47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-870 Malicious code in adroit-websdk-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e25eae4b9ba41f852f07d6769513bbe90b6bd7e6771c3780f4ee215da20335e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Unauthorized Access Vulnerability in Rongdu Guarantee Business Management System of Hangzhou Rongdu Technology Co.

Rongdu Technology is a leading financial technology system software and solution service provider, a strategic investment enterprise of Hang Seng Electronics, providing banking intelligent marketing system, guarantee business management system, factoring system, small loan business management...

Authentication flaw

The package github.com/tyktechnologies/tyk-identity-broker before 1.1.1 are vulnerable to Authentication Bypass via the Go XML parser which can cause SAML authentication bypass. This is because the XML parser doesn’t guarantee integrity in the XML round-trip encoding/decoding XML data...

SQL Injection Vulnerability in Free Version of Keele Intermediary Guarantee System

KILO Intermediary Guarantee System is a TP5.1 based intermediary guarantee transaction system. The free version of KILO Intermediary Guarantee System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Malicious Package in coinpayment

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

NetWalker Ransomware Gang Hunts for Top-Notch Affiliates

The NetWalker ransomware – the scourge behind one of the recent Toll Group attacks – has transitioned to a ransomware-as-a-service RaaS model, and its operators are placing a heavy emphasis on targeting and attracting technically advanced affiliates, according to researchers. Traditionally,...

Malicious 󠅮󠅰󠅭Package

Overview All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PRODSECBUG-2425: Cross-Site Scripting via Signifyd Guarantee Option Translation Override

More info at https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update...

guarantee-of-origin.ch XSS vulnerability

Vulnerable URL: https://www.guarantee-of-origin.ch/defaultordertracking.asp?language=xss%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Stampado Ransomware Sells on Dark Web for $39

Dirt cheap ransomware selling for as little as $39 on the dark web has security experts concerned the low price coupled with its potency could trigger a wave of new infections. The ransomware is called Stampado and besides its hallmark low price, the ransomware is also unique because it threatens...