Malicious code in @zitterorg/similique-nesciunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a027df748b44bf5fa20ffbf0860e8f8ea746d8ad92345541e4e0d77c07d3f15b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/cum-eum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 383bfe6b92e014b975003a7f1578d4a9668f7546b8dfbd387e0c11ded1f9872b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in auth0-mailchimp-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c2f2ab30602da138b3668767294a045502dabcc11b0db0aa9c89dd18de4ab0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wwc22docker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6cc55f6396721ab0a746c57ace10fd15194b2617b57c456818c9017038dc930 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in corraldev-activationsvc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 783e4eb475d74b1b4adc4aa4851393ded5ef222b3779734a8b1e4fe125605c6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airbnb-o2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f616f04c8ebcbe23cd95c1cb5cd4c7d72ac152d09c62ce82b5115f9abd9e0125 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-5154 Cri-o: malicious container can create symlink on host

A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal “../“. This flaw allows the container to read and write to arbitrary files on the host system...

Malicious code in @juiggitea/eius-hic-assumenda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fe23cfabe46a11eff41ad02a2131740d1aa2d372c88a9aba6de4f48b2fff0ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cedar-snippet (npm)

This package is considered malicious because it communicates with a domain associated with malicious activity and the package executes one or more commands associated with malicious behavior. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware...

Stealthy BLOODALCHEMY Malware Targeting ASEAN Government Networks

Cybersecurity researchers have discovered that the malware known as BLOODALCHEMY used in attacks targeting government organizations in Southern and Southeastern Asia is in fact an updated version of Deed RAT, which is believed to be a successor to ShadowPad. "The origin of BLOODALCHEMY and Deed R...

Malicious code in samplenodejsservice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90d2e2f79b4c5000c976cd4c1e99d091bb46b7dbee831bff50b3c69ff36e7dbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in somepackage-marksl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 736ee4fff51c88da50dc79bba67dcb4ee43dd8242b6d75beb08f8ca5f9bc841c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @lbnqduy11805/ideal-octo-spork (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37f1d31208ac8ecb349535fc04273dfeb84c17d325344aac63719c89ed0c2da5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iotnet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfce2833c5b3ba2b663b55cd3c22624573a6d5face271696869b0a3c779910ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in galileo-web-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1ea1d3425cddab091828432f9dffef7f8bc36f5fbf9bcd0e01dffe737417e92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in trujillocheck (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c6f3076b76a89a294e5f3b9fa3c249290e2f1241c671b12d7d062dcc44799eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in super-social-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acf38469c6e1fd929fce485f4b3ff1b4f3d7399422a92e8b23c61339502ad299 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in c3-pricecaster (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b03dfb89422ee188083a005d46e87873b3548d2f360a07d2380736049483de0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Vulnerabilities fixed in VMware products

VMware has fixed several vulnerabilities in VMware ESXI, VMware Workstation and VMware Fusion. A malicious person with local administrator rights in a virtual machine can exploit the vulnerabilities to execute code - with the rights of the application - execute code on the system on which the...

Malicious code in node-fetch-full (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa23bafe4cbc222c49a4c23ca3b173859fdba0359b927939a941b4768c6e0963 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...