MAL-2023-841 Malicious code in tdv2-applet-stream-her (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61f1a3a4e828660101ffe77b0a2ddc778e1877603d971ba4e76e4f7d85692a34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-735 Malicious code in react-sports (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a36f3d3c020e8060abbc0f642934bed99c8594f79b7306030d885b0bd3a838d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-604 Malicious code in mlp-friendship-map-mapping (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c76abb07078c4e50437fae33f4f845fad2aa8532a9503d2c5ea91f4bf6f9a5bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Financial cyberthreats in 2022

Financial gain remains the key driver of cybercriminal activity. In the past year, weve seen multiple developments in this area – from new attack schemes targeting contactless payments to multiple ransomware groups continuing to emerge and haunt businesses. However, traditional financial threats ...

MAL-2023-310 Malicious code in error-vitals-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65765054b32b6b83f5370f6ea07125ba241cd304e0ce45bae0a09a563b810f13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-517 Malicious code in ikemurami-di (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83c9d5062a3f6d873f6c8e5dacdd74ae75b2fb4f5f5c1726bd51015245d702f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-117 Malicious code in azure-sdk-fly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab63a2e65735bf69a56d323b1f5f75f5a931d4eed13e9fd4468e38047adb773a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-516 Malicious code in ifabric-styling-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb5e331622266751e6e1f5e5589bb9b154198d6f9cee4ecc54428e850960fc15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-784 Malicious code in sp-home-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 666572c644b50ae47d8c155e0e6297e840cf222216ebb534d81b4e4d1e501491 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-208 Malicious code in core-site-speed-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1583a2587d4a117d6dc59133fd52c7c8da04f57cd6265a159e8c50da5e82d8bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-848 Malicious code in teams-calendar-webpart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4407eeb60493ba69d7ef590b289a23d09231c321ce9840fe680bc0a0709be8a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-723 Malicious code in react-advanced-breadcrumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43ca4841853fdec8c951bcbb886eb3fbf01574178c614c25db2ed6a608d31d45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-182 Malicious code in clientcore-onesrv-businesslogic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fe6788e28c51766bdd46a7836833f82a888c11518f4d6ed355e8192822f70eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-194 Malicious code in cms-ui-presentationlogic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1ed28c883575b30f00714232f671ed736feb78c5dcc8ab6326d2d6eacc20466 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-187 Malicious code in cms-businesslogic-extensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a0524578c578563fb6702db75acc506cf100762a285f1b536add61f45b4e020 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CertVerify - A Scanner That Files With Compromised Or Untrusted Code Signing Certificates

The CertVerify is a tool designed to detect executable files exe, dll, sys that have been signed with untrusted or leaked code signing certificates. The purpose of this tool is to identify potentially malicious files that have been signed using certificates that have been compromised, stolen, or...

Actors, Threats and Vulnerabilities 6 March to 12 March 2023

For a detailed threat digest, download the pdf file here Summary For a detailed threat digest, download the pdf file here Last week, HiveForce Labs discovered three threat actors. One of them is a Russian group called TA499, which has a history of conducting different cyberattacks such as...

MAL-2023-664 Malicious code in owa-trace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2730f76c4a2f75133740b824ee87e42529cefc04f9dc35ec99403ffc56fde0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-662 Malicious code in owa-strings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e11e49aab0abb7a01a703ccc6527f87fb4d48ccf2f542466b209e0bd4ca1b2da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-494 Malicious code in hardhat-web3-utility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b492c5ccdb582dd43eb84cd6e87f55f91de39f0367ce38fa7426091cbccb908f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...