MAL-2024-9441 Malicious code in unity-xlsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c00dae819c9f67995c5364676a4b71e58196df002687ac1e333816c86e0bd53d The OpenSSF Package Analysis project identified 'unity-xlsx' @ 0.1.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9436 Malicious code in nf-gestures (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd3132b2cb17bc426c78b10555ce9246e42cab57a2a164d063850deb200c0ac1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9431 Malicious code in roblox-creator-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c24626261c9a2e163bb8ec1654a1b5afeb68caf4f82285bf05ebefcf94d414e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9430 Malicious code in projetmobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71d8a1d00b53e4f04ce0ad77ebfbbb389dd8a22bc6b9a388f22335cf649501ba The OpenSSF Package Analysis project identified 'projetmobile' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in emburse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a7f9320f062955ad648d35fec70489fe435e61acd5645c8b8dc6faf8e0c99ede The OpenSSF Package Analysis project identified 'emburse' @ 1.0.2 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2024-9420 Malicious code in @ciam-expressjs-vanilla-samples/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cc28deadcf9235665f79c65d92ca7684f27361c14efa6bcd44ad82b40947b9df The OpenSSF Package Analysis project identified '@ciam-expressjs-vanilla-samples/shared' @ 1.0.1 npm as malicious. It is considered malicious...

Malicious code in webpack4types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af76ada8574132366108f7556f6e93423bf630af2d9af6406efefc94dc3557ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9417 Malicious code in yogergerherhme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 364b3cb8f528aa44006944727caef3a2de94ca68d931e97cd82abcb3f2bc8197 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9411 Malicious code in gerhtregefdsr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 757aeb95f7403878b8830eb0255be7e2247dc80b446387efa2932304ec69fcfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9406 Malicious code in @safecorp/one-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9e0af8fba7ea4479d8e7a1cf1095346b605e9a718d6fd663ad9ee38130d12d6d The OpenSSF Package Analysis project identified '@safecorp/one-ui' @ 10.10.10 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-9405 Malicious code in module-with-prebuild (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82d63a2684b4dce89fe62dddc35e9699b9a3473378f32fc8c13c1a1bdead8b02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9403 Malicious code in toolspacks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d239c651cb854e2362266a5dda32897f7ac87b2c588562cb32654989daae4eb9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9407 Malicious code in j5gnpuiwerbngpiutbgn0iutb0p (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0e410a6e975b8a7d6930f2fbde2be25a08fd2bc8995fc57d1794fc12eaf1e019 According to the description, packages should demonstrate the dependency confusion attack. The realisation is, in fact, a spamming with packages having as the...

Malicious code in iufgbewroibgfowiebc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 06029514a813cf9b228f1be7c997bffc2510869a5f0130d6036fa63ee6ea2fbc According to the description, packages should demonstrate the dependency confusion attack. The realisation is, in fact, a spamming with packages having as the...

Hackers Abuse EDRSilencer Tool to Bypass Security and Hide Malicious Activity

Threat actors are attempting to abuse the open-source EDRSilencer tool as part of efforts to tamper endpoint detection and response EDR solutions and hide malicious activity. Trend Micro said it detected "threat actors attempting to integrate EDRSilencer in their attacks, repurposing it as a mean...

Malicious code in symphony-scatterplot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e726ee689acd8462ec021757c373dfd8f62595dc76ea919971bdf13659a2d913 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9304 Malicious code in nuxtjs_dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dcd288c0cffc74a3b962530a540a7cc62f2288445fd2f50c7aded40160d08871 The OpenSSF Package Analysis project identified 'nuxtjsdotenv' @ 1.4.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9300 Malicious code in aspera-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4ffc4efa392a68f9bbb7a8e63541c73ca6199c288c1ddf01880986017469166 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

YushuTechUnitreeGo1

Based on the provided code, it appears to be a Windows executable file PE file that contains a malicious payload. The file is encoded with a custom algorithm, making it difficult to analyze without decoding. The code is written in C and uses various techniques to evade detection, including: 1. Co...

Silent Threat: Red Team Tool EDRSilencer Disrupting Endpoint Security Solutions

Trend Micro's Threat Hunting Team has observed EDRSilencer, a red team tool that threat actors are attempting to abuse for its ability to block EDR traffic and conceal malicious activity...