MAL-2023-537 Malicious code in jquery-mask (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60c2e86401517688fc0bdbd68e989cce56834a9c11090e0a27fd0e0b5cdf9ca2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-435 Malicious code in fe-core-components-vuejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d60e569c72a226b7f460fd4ee1792523d0c53a9206b27aef9a6d2774378754ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-111 Malicious code in attribution-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5afc91a8d62e415d605efc5e9b132faa79e4d67b5aa087375dff9b544b70715c Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

SUSE CVE-2017-5397

The cache directory on the local file system is set to be world writable. Firefox defaults to extracting libraries from this cache. This allows for the possibility of an installed malicious application or tools with write access to the file system to replace files used by Firefox with their own...

MAL-2023-2248 Malicious code in simlpejson (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4cfde2df33b3ec54e8efeb6c165ccb068cb68ed0042691fdce6ee98dbb5f8003 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1677 Malicious code in ccx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4b65e79327daa2cc5ec5b36d4f94dde43607d8cb595f276122659ef69d86a25a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-65 Malicious code in @superbet-group/web.lib.vue-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0177c1a71b6ddf84d3b320b15eb180edf94406c0f6a4f07ad0b4ca33fcbb52fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-66 Malicious code in @superbet-group/web.types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3a0aaf7c7b5a8aedf6bc88f0778aee51462546adb577e4116a18d36d41462d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-34 Malicious code in @chegg/wtai-upload-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed3e4233e6f2d188d7f2bab940bf8574017cf73a97b440daddc7f4e3176075a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-927 Malicious code in usamaturk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87d02f6bdc2aef87b1fe34c7c3d0e97fe812b9e1be74c7c06da4c0a05e276a45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-883 Malicious code in thenamk3z (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7136bd556e8bf67544b369c2583a529fc5c8dd8153920ecd46d37007562040e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-858 Malicious code in testneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c5bc4adbdc90c94de1d80650508a0952b81e7cac9c2d2307982fb42be7eea49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-31 Malicious code in @buffer-mono/png-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9244d2dab3f1dfded05311dc18e1475aa475a5526b78409227c8b03dae2d3091 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-943 Malicious code in vpro-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f253aa388076bf368b5ac423864b7d018841dec34f8653f44275ebda501d6a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-400 Malicious code in fca-hrz-remake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b42a9f434f83ad9b083b69c15d70efcc6a935e51b8b0e4a0ee178a7ea81592e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-228 Malicious code in dataminr-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b286dc20121800a015dbb4aa930090547527e1263d319be083abaa48972a725 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-150 Malicious code in bykea_node_boilerplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee7671f75f343e3ed72d88d13441eac9e2269d6399266b79952a9a1e9b25a25b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-465 Malicious code in gateleen-hook-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd5573ea2c726699d52d6500b6c16ed2c5f5650d90de8c3f4f5325a1c07d484a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-184 Malicious code in climate-warehouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb03c4128835a9256b968cd63d617675ff8af803b43a908731d04f8b1b81151f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

TrickGate: Malicious Software Outwitting Antivirus for 6 Years

By Habiba Rashid According to researchers, there are a few key points that allow a packer such as TrickGate to remain efficient and undetectable for so many years. This is a post from HackRead.com Read the original post: TrickGate: Malicious Software Outwitting Antivirus for 6 Years...