MAL-2023-8146 Malicious code in nvthinh2001-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 461728de25ed03b83136b1135b9729cf11914136dab3f1133f47339e61f2bac4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8135 Malicious code in fca_kaizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58495d710c97f1a072f8b1a7715f33d3a6c8db188dbcfe8438f47ec1e2e282b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8127 Malicious code in eteres (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4f3da402b965cfedd565147e0db9b2f7d55656136aca4019d62ca23c6e30c83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8129 Malicious code in eterscan-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76972c8bfc325e599147a978e53f2e7bfc86c4c32b85cf5dfc37247e4e650e79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8138 Malicious code in hardhat-contract-size (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2427df1a48ed59a242042ba5fd1d3fd1d95dff9640b59fcc3ab406f957e6c298 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in centurylink (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d96a2f3ad371aca3dc5bd6bf227819ee63ad00b7b1283b8280dd49497d8f8590 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8118 Malicious code in subspace-relayer-front-end (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5ba5c7d050a216acda3025b0567509efd95f5e86479d47815a1b37ee74553dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8090 Malicious code in cloud-message-sdks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 479df48e71ae41e05b71f56e47a5a0a444e5992d40ed13730baf980dd5d3e7ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8073 Malicious code in limitd-protocol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adaca8a4172555e8b77c7a19d6596b6f56a357374861835e8f805915783a482e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8086 Malicious code in web3tool-providers-ws (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1728380aea0ef49ccdd469e28f2ce128f28bd46843f086103098fab9badafab7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8071 Malicious code in eth-web3-tx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c442b5b546b5967c812942b37c649d2e7caa2675e942bd96ddf40cbee1174f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8085 Malicious code in web3tool-providers-http (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b48912ad0b7823c02f9f4d0e86c2eb7803ee656afcb012be5186e51364d6ea62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8066 Malicious code in @huoshanjiebai/curvess (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f5ba4fdb4b49da67a8818968c3150d9a8d5a8fc9dc2ade51697cd41dfbe8eb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8060 Malicious code in chatbot-community (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0efbc44ac9dca194b96671df266fbb4f449c8641dbd574942431ab11e983f471 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8048 Malicious code in fiji-core-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 030c12f26f1b90ddf92e5edd56243d4b0a357d44d867c5ee071e544a490011a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Russian State-Backed 'Infamous Chisel' Android Malware Targets Ukrainian Military

Cybersecurity and intelligence agencies from Australia, Canada, New Zealand, the U.K., and the U.S. on Thursday disclosed details of a mobile malware strain targeting Android devices used by the Ukrainian military. The malicious software, dubbed Infamous Chisel and attributed to a Russian...

Malicious code in emonnn-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 861a042d2d8ede299482b2e5d50d000124de34b4a0d31abafdabbb9aad1e2a7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wallet-switch-chain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d7691c4b893aae23a99dd7bc91f8757ec2b3df3b7c311fed6fc4be65dda85fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7961 Malicious code in web3-provider-patchers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3da847a0100e6d34ec1eaaf261644c00fcc8342f19bf86f01da33f61a7fb9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

North Korean Hackers Deploy New Malicious Python Packages in PyPI Repository

Three additional rogue Python packages have been discovered in the Package Index PyPI repository as part of an ongoing malicious software supply chain campaign called VMConnect, with signs pointing to the involvement of North Korean state-sponsored threat actors. The findings come from...