MAL-2024-235 Malicious code in wlwz-2312-0702 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0430c426cdd7e7327447172b1e43c3c7c3af800e295645aa61598c927f73e09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-160 Malicious code in epsilonprotect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef52e6986533a7c033d72f59933c7c7ba77c0346de893aa7765e45afbecad8ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-159 Malicious code in epsilonapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddfb4cbc67bdf6c16f4d91e84f6042e1f65a6adb6d1acca2975b483612aee913 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-161 Malicious code in gothic-token (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4172096c341848a0f0d8c56be5e72561fe8d9b467aff45b6f1843bc3106a4a01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for Injection in Atlassian Confluence_Data_Center

CVE-2023-22527 !...

MAL-2024-163 Malicious code in discord.js-sound (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f77123d69642b2c93c33601cb76ca45905f45e0a6e25e03f1fb7fdc6caf2462 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

pyGPOAbuse - Partial Python Implementation Of SharpGPOAbuse

Python partial implementation of SharpGPOAbuse by@pkb1s This tool can be used when a controlled account can modify an existing GPO that applies to one or more users & computers. It will create an immediate scheduled task as SYSTEM on the remote computer for computer GPO, or as logged in user for...

MAL-2024-118 Malicious code in discord.js-sb-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1bbed6f3d435dc4be260e8aa0a12788635f71cb76f5ab2666a2789e62e1ddedc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Template injection

A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action. Most recent supported versions of Confluence Data Center and Server...

CVE-2023-22527

A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action. Most recent supported versions of Confluence Data Center and Server...

MAL-2024-104 Malicious code in chalk-color (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b0f69a9a955c3d91a271b9915114fbf4c8fa069f6358c794b9a27ab30c2df84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-80 Malicious code in pp-app-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80259057c4b53406f74c4212649b483cc008da900bdde58224869875f547873c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-67 Malicious code in @snip3rxd/ocore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5eed2b94e176531897a1d205f1a58b80faf47ba98e45b271c18a15e7a2ac714a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-20655 Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability

...

MAL-2024-47 Malicious code in ember-cli-progress-ci (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54512754f5c019f13ce9e5c3554ccdc6180846834e3f02daa24abb228033fc95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-63 Malicious code in dynatrace-oneagent-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b38a3f821fef1b8ddca507f11dff965bc5dddb2e2bd7d952c3b6b19103c69c10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-25 Malicious code in airslate-navigation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e41b4f37c7cdc6ed1146786305e2b00c1eaf11b43ff145ff46dc6b797e98cfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8 Malicious code in @authentication-pages/vue-cli-prebuild (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3c92ef13745278b15d59dfa706f96df5f1c3bb0261c9471d3e56eaa1449059e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8777 Malicious code in sparxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9c525477f636a7370201288e33ac0e0c31a9fd3d2919fb8d165092fcf367942 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8772 Malicious code in chain00x (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c83ef376b2958042c056eb67747bc40dd5850c90e665e7eb769642be3974e70a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...