Malicious code in wlwz-2312-3403 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3336add1f70bb1296c7c568db5237e86cf729d1ec0216c0899c20760d2534471 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-3504 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08007ddc0b98dd5cbb7d381d4fcf791e955716ebe7374839a2af009a7b24a1b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-3201 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b32e61f713b7d811f25c35a5978276024cdd9940030af2205dc2b972cabf49de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-2202 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e10e36ece1f9f0635b1737e646b57e8285e01b2f8e9728f3a258852c31f6b0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-2404 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f75aa36f59c831964296921b851342c992c2303d9c6bf241008a169a62887ef0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-1201 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98632bd2fe1e17696a9fd0b362ae482cb1bac65585ee4ca9047b0e92038a1af5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-1508 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b41a5751f5bebfefc6924901eeddcf70379be22759489be044c2c43b26d863b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-1103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7eb3cad0c6be5185b444f2611f3c1f4277f2bc0edb5864196cbdd2c41a093925 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-0805 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df0f7c0cca446699e186bbe9eac591dab538d9079bde3cee458a35077513d233 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-0807 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19c60876766fc6be6c4d3c052be321074be7036e5dd3934244344c1c6d98ef3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-0204 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 481e6eec652aa6799f0c100310a5848bb78d13382230d2ffe85043e3965b05f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-3304 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dae10314d3cd8ac3e8d01fd77f355ba950dacea74baacbf2a40a70c743b80cef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-1405 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 923ab46e25c6d2410f33e0c72213cd066ea388e3c4471d511d720db3c1f48eec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-0101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f7b6bed315237c97461395e2e22df72ad01377b69477f65012584188e6d8aa6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-4503 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baf9156272fc976e982b48026338167a18686a6ef1a6af4c2f405486c2c82375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

NS-STEALER Utilizes Discord Bots for Covert Exfiltration of Sensitive Data

Summary: A recently discovered Java-based information stealer, named NS-STEALER, employs a Discord bot channel as an EventListener to exfiltrate sensitive data from compromised hosts. This malware is distributed through ZIP archives that disguise themselves as cracked software. Threat Level - Amb...

Malicious code in gothic-token (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4172096c341848a0f0d8c56be5e72561fe8d9b467aff45b6f1843bc3106a4a01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Chinese Hackers Silently Weaponized VMware Zero-Day Flaw for 2 Years

An advanced China-nexus cyber espionage group previously linked to the exploitation of security flaws in VMware and Fortinet appliances has been attributed to the abuse of a critical vulnerability in VMware vCenter Server as a zero-day since late 2021. "UNC3886 has a track record of utilizing...

New Docker Malware Steals CPU for Crypto & Drives Fake Website Traffic

Vulnerable Docker services are being targeted by a novel campaign in which the threat actors are deploying XMRig cryptocurrency miner as well as the 9Hits Viewer software as part of a multi-pronged monetization strategy. "This is the first documented case of malware deploying the 9Hits applicatio...

Ansible Config Gather

This module will grab ansible information including hosts, ping status, and the configuration file. Module Options msf use post/linux/gather/ansible msf postansible show actions ...actions... msf postansible set ACTION msf postansible show options ...show and set options... msf postansible run Th...