BELL-CVE-2023-31085

Bulletin has no description...

MAL-2023-200 Malicious code in coinsbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24df958f45174789a669d2bd93abb0ba014c2f3b2ba7a3f6604cd662bd31f0b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-119 Malicious code in b64-svn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c4462d12f5ac67a8c0dcfc8182a230ed7f7a51afa9722cfc8013217429517d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-85 Malicious code in airbp-cards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85909d85812d972631236bae206926985a3338e536e82a3c983e278f08c4c6c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-170 Malicious code in charlie-sql-designer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 644808c373cdee9e838e732c6ebebab68ee0108ae8502df5bab5aa95451581d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-862 Malicious code in tetete12312 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31a599485f0fdc009bb5be306d1bf977208f01e4508ca170506ee0144aa6f9bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-929 Malicious code in utils-dust (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc48096a3c9ec1e7db0ddab8489b841ccde69100000ded1c48c7cd9a87426520 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-681 Malicious code in photos-story-animator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 358cb47b9a08355f8b423f06a058d4a0622e10984c25cbb4411a8d6868208882 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-224 Malicious code in dapifix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b56326a9c8a6c5268db6b94dc6006e384f9dd3111a13926b1d95d0d0e7a5afcf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Post Action Report: Bad Firewall Rule Released to WPEngine Customers Wednesday

On Wednesday afternoon a small percentage of WPEngine websites using a paid version of Wordfence experienced a 500 Internal Server Error or white screen on their sites due to an erroneous firewall rule that we released. If you have experienced this issue, please check your email which contains...

MAL-2023-860 Malicious code in testpackyeaaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c5b13be95f557fcc861cb88bec3bc7822081d2b58481fc426ad0d80583e85ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-780 Malicious code in smarttv-screen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c1206c11f41ef711a2a427150a0c5529e775123fa6d441e320f324388924604 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-246 Malicious code in deskpro-notifications-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9e07cbfe7dbcfbce0bd86d7353862570a270265a771f2ed1da61bb8ddf101b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress YourChannel: Everything you want in a YouTube Plugin <= 1.2.3 is vulnerable to Broken Access Control

Software YourChannel: Everything you want in a YouTube Type Plugin Vulnerable versions = 1.2.3 Fixed in 1.2.4 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-1868 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID b65addd676af Credit...

MAL-2023-159 Malicious code in capfb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 266decd2f38301f7ec288850e068420e62cd39a10c8de6f6923d19e19c61a652 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-553 Malicious code in kemnasa-sp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11e53e1596af827447edef4919e4a6f003dcb35cfd0e674d6062c2a626982249 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-20 Malicious code in @12build/account-api-ts-axios-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc5c5465a393a23f776128754b0543c03787f78e563b7142645453e912068ff6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-832 Malicious code in td-app-finance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf37f106766555425d4a6579374a74778e61776dcdff333df9129a109b4a82d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-292 Malicious code in ds-ember-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32eba44302a74869a67c73b03d739a2f3e06ac76700e85bf314ed9bbe4efe7e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-836 Malicious code in tdv2-applet-monalixa.store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c1d448a144690b4cb560c6addca919072d44b799f174ae3bcc148bb25a81308 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...