MAL-2023-266 Malicious code in do_not_install_this_is_a_test_package_norwegianwood (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 760af34f0c361cfb1e783677a5ed11cb712a1e848148e76ea2289ace783b0356 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-386 Malicious code in fca-chat-zach (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7412bfa443afe9140f4865df0e0422e75243e8dce896fe7011126f77567f4001 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Cisco NX-OS CLI Command Software Image Signature Verification (CVE-2019-1811)

A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability exists because software digital signatures are not...

Cisco NX-OS CLI Command Software Image Signature Verification (CVE-2019-1813)

A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability exists because software digital signatures are not...

Malicious code in solodev-cms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1231265823e0166c738416defa7883c13c543b22ed1f2240daa1517f20908741 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-398 Malicious code in fca-horizon-remaster (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d82aee22fcb9d69dc1b8ec8823954165ce545b1ab39eebd6f330094e1b84af84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sportsbook-env-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d79654ab4931607762a27f2b9d074eb3e78eab79c6ae9d6799541d54612c3bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-379 Malicious code in fca-anjelov2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 730aafb848eae5cd60a92a1ea9c347a0d8943224bb472952511c4ad6ebb3ef43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-381 Malicious code in fca-anjelov5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eba1b88950fffb7a31b0198d26986dd299eec7409c8fa228081e1b9a62ea031e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-98 Malicious code in anjelo-dev2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bec068f3e56304c48c4c48eecfb4eb7fd2c133a59aee2adf16f1fef8d870e18e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-414 Malicious code in fca-mod-hrz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63829e3df05a630b9b8a409f30545af4dc6048ce41b951d014a6e6397e8d57b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-695 Malicious code in pretty-literal-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 364c533f74b84a92914fb0654862ca1daf2f125812bd1fba9f8a8f112c773248 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-916 Malicious code in typeahead-client-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9121846b93247c8f8db2f98b553de9231e63282325f9bbaff65e8b6916d2a6cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-967 Malicious code in wix-commerce-ticketing-nextjs-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0b99bb56f643f4526ad69d487c48bec96603f7a221baf7ed0637b6cdb74d3c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-756 Malicious code in samplepackagedemo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c55c21d2ed72077608698c710d7eb69de600ca8f9e45b448f7b5769c6bbf0c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-399 Malicious code in fca-horizon-remastered (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22e4b2051f69220a9caa031f9973e92468b01c05b2c9688ea2aa5e0931e8467e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-605 Malicious code in mmqs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d86f79853ff387ce4589a3ee123c6fdf54950b6505232c969c3a0e3ac3a1e1b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-589 Malicious code in mesos-term (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ca86e4f7655ee05071ef73a17f239df8dcc483b932ef71d351cf47e8435376b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Threat Roundup for June 16 to June 23

Today, Talos is publishing a glimpse into the most prevalent threats weve observed between June 16 and June 23. As with previous roundups, this post isnt meant to be an in-depth analysis. Instead, this post will summarize the threats weve observed by highlighting key behavioral characteristics,...

Malicious code in yaml2stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1816a039a50de4469c1bede9e81c8e477e1103ba0fd8e76fda21bfcb8ed8fd10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...