335 matches found
MAL-2022-6546 Malicious code in theme-whale-light (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c40def8d41c4b7ebb0169b850854b2a3cbdbd547e0e5e4ab2294ecf310c1b471 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1668 Malicious code in brave-chromium-themes (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d79eeeb9331ecccff7119c01e7502067dbecc674a2d97d5168e7aba1d126925d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5251 Malicious code in paytm-kafka-rest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8edfa4dabe018178d0903a28e13409a37b657b204270e6036afb5d22488e428a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6723 Malicious code in ual-reactjs-renderer-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51f103cbd42e4c8208e6cc75f422cc09ce4766ad160032a8fbd7529826851757 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2381 Malicious code in ddd-demo3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2eac035e89513982d440328e69c5d811c0540172b7b17a393a37b67685b57784 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-352 Malicious code in @image-process-library/blob-to-base64 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d97f201a6169602b9dcfdcb3be126c7d1f1a71e3aa1dab3330d18f7437f199f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5389 Malicious code in pocjenkircetest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebbf04e7a39de82685b8e0cb1fc6ad03deb085f0db3630624a3b736b99d0a7f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4296 Malicious code in lib-admin-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5698b187e32735c01b7b4cd91b98099a130910341c1c82b96030b5256eadaf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6210 Malicious code in some-crazy-dep-that-doesnt-exist (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bba7898448e8d4f73d570414401ad6087f1975f5929f72e38815a6bf95c28103 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-625 Malicious code in @techops-ui/ping-authentication (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a749343c0f3bd880d49d9a576f5a3444ea3c61994a7d87d8f4f0f3fda0db14a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5434 Malicious code in pp-react-buttons (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 000ff8cda66b7a099f0780508fa3aa26f9c586ea54c2ec040c448b46ba5e8a97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6524 Malicious code in testingx (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec41ceb63dd221afb9f167fecc39fe14258dbd4020d0e62d7f7df94062c2679b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package in arsenic-tabasco-cyborg-peanut-butter
All versions of arsenic-tabasco-cyborg-peanut-butter contain malicious code. The package downloads and runs a script that opens a reverse shell in the system. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...
Malicious Package in wallet-address-vaildator
All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...
Binance Hacked — Hackers Stole Over $40 Million Worth Of Bitcoin
Binance, one of the largest cryptocurrency exchanges in the world, confirmed today that the company lost nearly $41 million in Bitcoin in what appears to be its largest hack to date. In a statement, Binance's CEO Changpeng Zhao said the company discovered a "large scale security breach" earlier o...