Why the Things You Don't Know about the Dark Web May Be Your Biggest Cybersecurity Threat

IT and cybersecurity teams are so inundated with security notifications and alerts within their own systems, it's difficult to monitor external malicious environments – which only makes them that much more threatening. In March, a high-profile data breach hit national headlines when personally...

MAL-2023-610 Malicious code in music-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01508d334e0bbe8458f00ca13978e861399e796f527f528b23fd9bbcd55000c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scuntest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f42cc62b8cee0d48d9ee1455debbb923baaab65c1fd45a70a726d6053cb36086 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in she-c (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c543fa7808e46aec1ba9687ac00385f262346a6bd46a73bb090a010dfe985d76 The OpenSSF Package Analysis project identified 'she-c' @ 2.2.8 npm as malicious. It is considered malicious because: - The package communicates...

Malicious code in service-etl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 851b9d051bac830771e87d8acb0857e1bb20dcf8f3fad2af78ca8785cda4d668 The OpenSSF Package Analysis project identified 'service-etl' @ 11.11.3 pypi as malicious. It is considered malicious because: - The package...

Malicious code in nodejs-encrypt-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f59ac2ca2c204c22b2a5f11db9eef454f786803297f219aeb3e179dbe656ae07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-681 Malicious code in photos-story-animator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 358cb47b9a08355f8b423f06a058d4a0622e10984c25cbb4411a8d6868208882 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vibranced (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15ed6cad6ab02580f42475881d01ec0af9fa2e95362a6d3238d934065d42f65e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-545 Malicious code in jutsulepb- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27d5faa74f07d2b58c491831146ed413f13b93f8b88abd784e08926ea85e74b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-432 Malicious code in fca-zach-remade (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9647625dc78eb955e2d970aa60159a08d9e50e1e80f1be250861c8428d918935 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1000 Malicious code in ynodejs_mod_log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 861d73fdebc783ac105077a9c4483c1c7e4528821dcd7c8e7b8a1e27bbed1f9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-780 Malicious code in smarttv-screen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c1206c11f41ef711a2a427150a0c5529e775123fa6d441e320f324388924604 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-591 Malicious code in meteor-uploadcare-widget-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 524e985710633866c8a77431e4ded18aa911c225db74bb40da3457894383be3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-174 Malicious code in checkout-demo-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b6c81ff2e93760eb7bdf531dd3932fcfeb0de068e99ab2d1910004c1b0ed884 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Car Thieves Hacking the CAN Bus

Car thieves are injecting malicious software into a cars network through wires in the headlights or taillights that fool the car into believing that the electronic key is nearby. News articles...

MAL-2023-15 Malicious code in 123rf_contributor_web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa1feaa1ec9864042d7b5a95b8d8c36753f4fc0bdf38f61cd628b4bb2e1652b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-469 Malicious code in gd-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 221b6a9aa3d4f9b660d09c76d266034543c6cfd6fbd0da1dfa564ec050c0a446 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-22 Malicious code in @12build/segment-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 856e63ff9eebaf0c3443eeee789588cf844ca28e1810394d67c01e5f5a4aa601 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-840 Malicious code in tdv2-applet-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44d9f0f475f31c69d603b6953d97d1b896179620b901a811fd032be0a22d9003 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-835 Malicious code in tdv2-applet-featurebar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9d2dbbac5b3d226becbb379b83d7348a2fd220425d70d215310baf04711931d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...