4305 matches found
Malicious code in fasclck (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 660c53cfb85a6a700bd046082a978aaf7483745fd4c9f96fcbaa21db536c0122 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in crypt-osj (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 866ab4f1ee9ce8e2e4d4737ae37177fe6a206cc888d00e8d9b3af8e323434910 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in bytebufevr (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ea5bddbe37e0bfafbe40547bc4d9cac64ed8b2d28073e93aa71b36a938de419 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in babfl-ie2mplate (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa01fa657eb1928f2ad638cf89f758ca0456a8a4fd14d843ef39074f70b23bd9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in chal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49f6a7a274321f3f3de3f98040f049649044c28e22a998df9fd2f3e3b7f05e0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in 2jasmie (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c94db8325f4e0c80d061a52502ee3c933ab674ad1c610036d8c1404921e52ab8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in loaashmcrge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e69668a5a955325b81b0cfe134efa939088e64e8cc5cb3c17d1ec9342118175d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in gruntconric4opy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55a0055227167610b248f694852bd23e746fa40fed4f2a6ad589341ec87e2cb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in dbabelpreetstage1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ef354610533ea219a0b088b2e812b5791e6a112d98e67e0382f78de2dbc6e50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in crosse (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2abc10fe50429ed3ede3fe0efbb03a6a8ae7e2bad45a73b00a2b5f9a4d54af57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in babelplugintransformclassproprties (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f2cf83083c3b8010be953e5ffac9e9710d6ab60cd0bb48e9913f53f1dd9fcf7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in baeltraverse (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5521deb024dc261aa5752ce50bb07c2abb01b57a9150edc884d71557be491041 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in babelpreset4stag3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df8fe48868e1f0ed1405f13ab7388a1abd2105207728fa0421e87e13032ae279 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in babelpl0uginteansformasynctogenerator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0e514eabee6d9e4ac0aacd5677fc2e90d389a7329a0784ca49d04262b71327c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in breezeweather (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 104a071c45ada8f8553b3d991630e629b778ce57c698cad969715075ec32a1c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
BlueSky ransomware incorporates Multithreading to expedite encryption
Threat Level Attack Report For a detailed advisory, download the pdf file here Summary BlueSky ransomware is actively targeting businesses and demanding a ransom. It appears that they have ties with the Conti ransomware group. The malware is now primarily targeting Windows hosts and uses...
U.S. Dept Of Defense: springboot actuator is leaking internals at ██████████
Proof of Concept If you go to https://█████████/actuator you'll get a complete overview of all the endpoints that are accessable Suggestion: Use a Firefox Browser if possible, its json representation is well formed and the links are clickable ██████████ Impact Information Disclosure...
New IoT RapperBot Malware Targeting Linux Servers via SSH Brute-Forcing Attack
A new IoT botnet malware dubbed RapperBot has been observed rapidly evolving its capabilities since it was first discovered in mid-June 2022. "This family borrows heavily from the original Mirai source code, but what separates it from other IoT malware families is its built-in capability to brute...
Malicious code in ai-image-tagging-lambda (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec8ef7b0545eaa94432484debf73c757fbdcb6c21231a5a250f30afac3c5a8eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
