MAL-2024-1101 Malicious code in test12323123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ecbea51c0b15a8930a95267ce5c77d278fbf6de9907b7550db4f80b3958ca76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1083 Malicious code in liquity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e4b0656498122960a3dfed802920c3ae8d545955f077fb818b5f9995a5964e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1073 Malicious code in dismissprovider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e57b2c157fbb4ae27dd1ea7ddb8c370c151171838b953706151a60c3399716b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1062 Malicious code in unity-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d7a62539b563d36148b212913759293a68090ffa3505239a01cd432698619c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Meta Abandons Hacking Victims, Draining Law Enforcement Resources, Officials Say

A coalition of 41 state attorneys general says Meta is failing to assist Facebook and Instagram users whose accounts have been hacked—and they want the company to take “immediate action.”...

MAL-2024-1054 Malicious code in win32crypted (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a20fa9d2f01c5cc1893bbe4cfe5659f6bba9ce4dff54b741dbc46f5ded5402dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1042 Malicious code in frd-rsa-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8787b5e0e6583bf27e7ad1a0f2da3d1fc03021fa9a8957e681cc9c79c0f6acd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Socialdriver Theme < 2024 is vulnerable to Cross Site Scripting (XSS)

Software Socialdriver Type Theme Vulnerable versions 2024 Fixed in 2024 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-4826 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6b8a90a1f910 Credits longxi Required privilege Unauthenticated...

Update now! ConnectWise ScreenConnect vulnerability needs your attention

ConnectWise is warning self-hosted and on-premise customers that they need to take immediate action to remediate a critical vulnerability in its ScreenConnect remote desktop software. This software is typically used in data-centers and for remote assistance. Together ConnectWise’s partners manage...

Critical Vulnerabilities in ScreenConnect Under Active Exploitation

Summary: Critical vulnerabilities in ScreenConnect CVE-2024-1709 allow attackers unauthorized access without credentials, while CVE-2024-1708 enables remote code execution. Hackers can gain direct access to confidential information or critical systems. Immediate patching is essential to mitigate...

MAL-2024-1032 Malicious code in testconfusiontestt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68716301fda6917d0a2abf5455e1ab2d5780d533eb27a1033a84888b0f9677eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1020 Malicious code in analysis-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6df618b529012f6ffca73476f9c27854370f58223bddbaceb6acb01605d75909 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1023 Malicious code in analysis-tool-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab026f9cd9836e60e06d6f1449c82d1e5d26662722dfa2be764f46778eab3b39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1009 Malicious code in execution-time-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cfb518a6f8c71bfcbaea6494b888189e261a9f7a6be487568339baeb334ad7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-998 Malicious code in vtuanhihi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware beb3ff692f6cbb63f5bbb6a7875f7dcbd21bae8d980a457f6b8ff5a685185bbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-979 Malicious code in dependency-ab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3fec8d7ec43c80d82430113c122d14e2ff81d81b32ded41933bbdf246305772b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-978 Malicious code in can-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f696066311cec522d6c17a2546c56b2eb9c9af638d62dbe8814fc95461eb0750 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-949 Malicious code in diil-front (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a63442371776ec2bb7ec621217d72fc34d237c28b8da4150e0bb243e05ff3dd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-936 Malicious code in jewishapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19d1435255a826e73cab7760affeac8c2af279590c96b3b7470abe0630f4c1dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-941 Malicious code in o2-ionic-image-loader-v7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c645fd90c285367a338c640179963eff4cec0a670e47392a050ca826671442bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...