MAL-2024-7935 Malicious code in bankrate-iconographyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d00e59c6535155e2b679c43788644b735299b33970efa0999a702f82ec203f19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8003 Malicious code in viewability-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d6ab3215e22d1ba76d15137a6915fc6703eb21620b8821706dc5b006ce735d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7981 Malicious code in react-bs4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78bc438299611b89dd8a16ca1b19661e9606898bbc7c61bebd4bfd59fe8c3134 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7968 Malicious code in kiwoeslw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bae85e2f36251f9936fb3b965298a113bd8e3f92666f152e5882d69c935545bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7973 Malicious code in mapbox-maps-android (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6283105b5c07939844bd2730cc42bf4c6e8d9bbaf713a147707078aa4e14a4d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7955 Malicious code in fabricexample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4137c5f31f16d594edda141045f7330412108a4d9bc3bb7f4786e8d6e4c09eb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in litebs64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 464eb08865be218f66f621469eb82604a3a6ad516b41dd52a8232eb595a832be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7995 Malicious code in theme-bahrain-nb-hdddc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22b870164e088eff8d02fbc7631e1a1635a1810965e38de6362e8d93dc02434d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

China-Linked Hackers Compromise ISP to Deploy Malicious Software Updates

The China-linked threat actor known as Evasive Panda compromised an unnamed internet service provider ISP to push malicious software updates to target companies in mid-2023, highlighting a new level of sophistication associated with the group. Evasive Panda, also known by the names Bronze Highlan...

MAL-2024-7892 Malicious code in prmnmd-tuls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 422a0a19eabc0aeb101d13844348daed919589aa7aa3b6567c3146a5850c7678 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7889 Malicious code in permenmd-track (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db6efdc7a6ea747eacdf9b6dbd68c824e07aa445ac5c745fe847bf13866414c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Obfuscation: There Are Two Sides To Everything

How to detect and prevent attackers from using these various techniques Obfuscation is an important technique for protecting software that also carries risks, especially when used by malware authors. In this article, we examine obfuscation, its effects, and responses to it. What Is Obfuscation?...

Malicious code in nodebs58 (npm)

The package contains a preinstall hook to execute unhook.js, which has cryptocurrency stealing functionality. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06acfd91a86ac73f0160fab5b4c198882f9f8dac8617c79b28f62ae487cbcf66 Any computer that has this package installe...

MAL-2024-7861 Malicious code in @illimity/core-banking-state (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e4a29525c951e93fc197dc9c57e657855c0bac65e57ddcf12f6fb12c20dc281 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7864 Malicious code in @illimity/rtl-faqs-state (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b3cec0888ebd3cfb912bb1459486caca7109d7fdb2a980c28641e3eef38d451 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7868 Malicious code in wix-smarts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df57af06b1b5cd455e4d81a7d9979d518578a2b49fd8b99019d721270edefa65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The Power and Peril of RMM Tools

As more people work remotely, IT departments must manage devices distributed over different cities and countries relying on VPNs and remote monitoring and management RMM tools for system administration. However, like any new technology, RMM tools can also be used maliciously. Threat actors can...

GHSA-G872-JWWR-VGGM Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment

Description: Remote Code Execution Vulnerability has been identified in the Message module of the Admidio Application, where it is possible to upload a PHP file in the attachment. The uploaded file can be accessed publicly through the URL admidiobaseurl/admmyfiles/messagesattachments/filename. Th...

MAL-2024-7850 Malicious code in ent-widget-phone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7313a06ff628db941fa9330887fdea43ce979086e4ce11ef7d0c0041a9a0f9b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7854 Malicious code in testalonimaurice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80ad03064c65acf925c16881cf35e79cbd2aac0bda615b6793bdf329bdeccccf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...