MAL-2023-8138 Malicious code in hardhat-contract-size (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2427df1a48ed59a242042ba5fd1d3fd1d95dff9640b59fcc3ab406f957e6c298 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in centurylink (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d96a2f3ad371aca3dc5bd6bf227819ee63ad00b7b1283b8280dd49497d8f8590 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8118 Malicious code in subspace-relayer-front-end (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5ba5c7d050a216acda3025b0567509efd95f5e86479d47815a1b37ee74553dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8090 Malicious code in cloud-message-sdks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 479df48e71ae41e05b71f56e47a5a0a444e5992d40ed13730baf980dd5d3e7ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8073 Malicious code in limitd-protocol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adaca8a4172555e8b77c7a19d6596b6f56a357374861835e8f805915783a482e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8085 Malicious code in web3tool-providers-http (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b48912ad0b7823c02f9f4d0e86c2eb7803ee656afcb012be5186e51364d6ea62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8086 Malicious code in web3tool-providers-ws (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1728380aea0ef49ccdd469e28f2ce128f28bd46843f086103098fab9badafab7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8071 Malicious code in eth-web3-tx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c442b5b546b5967c812942b37c649d2e7caa2675e942bd96ddf40cbee1174f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8066 Malicious code in @huoshanjiebai/curvess (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f5ba4fdb4b49da67a8818968c3150d9a8d5a8fc9dc2ade51697cd41dfbe8eb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8060 Malicious code in chatbot-community (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0efbc44ac9dca194b96671df266fbb4f449c8641dbd574942431ab11e983f471 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8048 Malicious code in fiji-core-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 030c12f26f1b90ddf92e5edd56243d4b0a357d44d867c5ee071e544a490011a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Russian State-Backed 'Infamous Chisel' Android Malware Targets Ukrainian Military

Cybersecurity and intelligence agencies from Australia, Canada, New Zealand, the U.K., and the U.S. on Thursday disclosed details of a mobile malware strain targeting Android devices used by the Ukrainian military. The malicious software, dubbed Infamous Chisel and attributed to a Russian...

Malicious code in emonnn-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 861a042d2d8ede299482b2e5d50d000124de34b4a0d31abafdabbb9aad1e2a7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wallet-switch-chain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d7691c4b893aae23a99dd7bc91f8757ec2b3df3b7c311fed6fc4be65dda85fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7961 Malicious code in web3-provider-patchers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3da847a0100e6d34ec1eaaf261644c00fcc8342f19bf86f01da33f61a7fb9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

North Korean Hackers Deploy New Malicious Python Packages in PyPI Repository

Three additional rogue Python packages have been discovered in the Package Index PyPI repository as part of an ongoing malicious software supply chain campaign called VMConnect, with signs pointing to the involvement of North Korean state-sponsored threat actors. The findings come from...

MAL-2023-7968 Malicious code in mmolecule-elasticsearch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4066df1016d7aee5ec19b765089b99b9b47513327cbbe8afe20985bb3fbda37b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7946 Malicious code in @apex-ui/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4019e99da7923a93919d8a184b8ea6b720e390e1ac8d94deef47992fdcdb238 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7950 Malicious code in discord.js-v12-lukyy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84f8bf74e566b2971105d1d8482b27bb35a3cd1aa60def4e10b9ae09a4397da8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7929 Malicious code in @webquote-ui/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7a932d7cda6b4ad8af3c7eb85920a296bdc3eecb9b8b2ae8b6445a5a6cb3698 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...