MAL-2023-8499 Malicious code in vtex-toolbelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0667be5f3afa2cd95762d584c729cd38dd39ca8d11bbd7d353a5aecf3f944334 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8485 Malicious code in javascript_process (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84cf13c77fb909c2e0246b53401cb9aa39243132f525f6e5dd9775da78582887 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8470 Malicious code in jest-coverage-report-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a570942cc8be879311bbb1b601f658554c30fa3734aacac08c1c53289da55bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8455 Malicious code in creators-landing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fc0499f838e1cfd0606c8ecd156259994c73c118b52297215ce9f135ca9028e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8445 Malicious code in @inventashif/workspace-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fe4fedd5d11a10d847f74fc3fa803fcacb0f7484be032ee6b87bdb61e84ed31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redux-modal-dispatcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcee00987882a553fbc08f339c47202ff3c398a2a05d684fa118692d0256b0bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8446 Malicious code in airslate-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a38e9b5638e56d7f1a1fb5d3d5d396fc0a8aee158c609b74bce384f3a4d79cd5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8441 Malicious code in mux-spaces-broadcast-layouts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01c1c36f1f5a800c8875fff926e7201ac81769be7b9484aa1360c3cb2118ae00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in watchman-search-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9d31c46bc906a3eeb18b4852518f529d915f87ab7935775541759d38c18151e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8416 Malicious code in idme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59bf5be80aa56e65bc3e5000865abe09b7f0f0a8b23978c69c841e75a6c5503c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8415 Malicious code in bonded-stablecoin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5783c50f1b49753de6ebb992bb15ea3197c4db4138fa711bbd25cd125199963 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-43509

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to send notifications to computers that are running ClearPass OnGuard. These notifications can then be used to phish users or trick them into downloading...

Design/Logic Flaw

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to send notifications to computers that are running ClearPass OnGuard. These notifications can then be used to phish users or trick them into downloading...

MAL-2023-8400 Malicious code in envi-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf29d35387a88f70fb474d1d02435edd91ab0c4f8f482414b8f2c046328b820f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-43509 Unauthenticated Endpoint Allows Sending Arbitrary OnGuard Notifications

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to send notifications to computers that are running ClearPass OnGuard. These notifications can then be used to phish users or trick them into downloading...

CVE-2023-43509 Unauthenticated Endpoint Allows Sending Arbitrary OnGuard Notifications

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to send notifications to computers that are running ClearPass OnGuard. These notifications can then be used to phish users or trick them into downloading...

CVE-2023-43509

Summary of CVE-2023-43509 : A vulnerability exists in the web-based management interface of Aruba ClearPass Policy Manager that could allow an unauthenticated remote attacker to send notifications to computers running ClearPass OnGuard. This can be used to phish users or prompt downloads of malwa...

Malicious code in z-dsm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e2e8df0358f7f04a5b41981e5e7496d99d985f9e76087b0e3a233566f9ddfd0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8381 Malicious code in data-kempremium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ffb4f398ace8285093c5eb454687bbc7d7ceb895997acb08461f926659685fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Discord, I Want to Play a Game

Discord, I Want to Play a Game By Ernesto Fernández Provecho and David Pastor Sanz Threatray · October 16, 2023 Discord is the first choice for gamers when they want to chat with some friends while playing an online computer game. Moreover, it is also a major choice for users that simply want to...