Microsoft Warns of Widening APT29 Espionage Attacks Targeting Global Orgs

Microsoft on Thursday said the Russian state-sponsored threat actors responsible for a cyber attack on its systems in late November 2023 have been targeting other organizations and that it's currently beginning to notify them. The development comes a day after Hewlett Packard Enterprise HPE...

MAL-2024-164 Malicious code in discord.js-sounds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdfa47c01e5a71fae385f0e33ccdecc9e8af079d01f3f8e400032bfb6a524b6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-163 Malicious code in discord.js-sound (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f77123d69642b2c93c33601cb76ca45905f45e0a6e25e03f1fb7fdc6caf2462 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in orchidnet-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0dd6961cefb46152dbb4b21adeb369408e08c40551592284dd3789c650000d08 The OpenSSF Package Analysis project identified 'orchidnet-web' @ 9.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-148 Malicious code in cagov-template-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a3e81e15d59085cf12a3a46a1dc253df8e81c9ff8756d76f8ab9db14b82caab8 The OpenSSF Package Analysis project identified 'cagov-template-v6' @ 9.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-147 Malicious code in sample-schema-mgmt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4ef77c3bb30fb8fc7dc5c8e999eb9187db74dca1d1a5dc38068c32b54ae508b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-146 Malicious code in vscode-mlir (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c610eb26b75afffa49527255692e967a24bbe7fd61242d8c2f45420c72d9b589 The OpenSSF Package Analysis project identified 'vscode-mlir' @ 2.0.1 npm as malicious. It is considered malicious because: - The package execut...

MAL-2024-145 Malicious code in materialxtest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98caac4513156692e87224323de637a922a6802ab80e04a0b3ceeceb8602764a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-137 Malicious code in froxlor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 445e6f97a516e090b04dc5969fbc1472e2c740461dec0b7769bbe76e5d3b6326 The OpenSSF Package Analysis project identified 'froxlor' @ 19.0.4 npm as malicious. It is considered malicious because: - The package...

MAL-2024-135 Malicious code in siif_components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2304aeb0d32868f4f2b4f1b3cc9c6fe5d8109d9a14029cbaab0d947287e9686f The OpenSSF Package Analysis project identified 'siifcomponents' @ 7.0.5 npm as malicious. It is considered malicious because: - The package...

Malicious code in storefront_h5_sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f7c0d65d6fdf4ca9a7677bce242a39f89c488703b532de05acb574c7baa799e3 The OpenSSF Package Analysis project identified 'storefronth5sdk' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-132 Malicious code in storefront_h5_sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f7c0d65d6fdf4ca9a7677bce242a39f89c488703b532de05acb574c7baa799e3 The OpenSSF Package Analysis project identified 'storefronth5sdk' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-131 Malicious code in pd-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b46ebcb2f76102916a1ab764b5af360b8c6cdd1dc56a269538132bcc4e307983 The OpenSSF Package Analysis project identified 'pd-ui-kit' @ 1.5.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in testing-dep-collab-obsfucated (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c5a66859a22b9608532f75d7748aee57740c8699a9204d441db0e1104e1c4c50 The OpenSSF Package Analysis project identified 'testing-dep-collab-obsfucated' @ 1.0.0 npm as malicious. It is considered malicious because: -...

MAL-2024-110 Malicious code in testing-dep-collab-obsfucated (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c5a66859a22b9608532f75d7748aee57740c8699a9204d441db0e1104e1c4c50 The OpenSSF Package Analysis project identified 'testing-dep-collab-obsfucated' @ 1.0.0 npm as malicious. It is considered malicious because: -...

MAL-2024-102 Malicious code in testing-burp-library-please-ignore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2249726c84e729bde202820bcc2ac6cdfaec65115b09e7505b33a51158988aad The OpenSSF Package Analysis project identified 'testing-burp-library-please-ignore' @ 1.0.0 npm as malicious. It is considered malicious becaus...

MAL-2024-92 Malicious code in wdpr-device-detection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e68ddd57d0cced6084c7770f4e48230e223d896f927b8952e4cf5d05caa721f The OpenSSF Package Analysis project identified 'wdpr-device-detection' @ 24.7.16 npm as malicious. It is considered malicious because: - The...

MAL-2024-96 Malicious code in wdpr-node-http-error-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4afec8bd883f6042f7047f6b0d29cd37d57ef2e6f179a717a0ee7bbf44a16fe8 The OpenSSF Package Analysis project identified 'wdpr-node-http-error-handler' @ 16.1.1 npm as malicious. It is considered malicious because: -...

MAL-2024-95 Malicious code in wdpr-node-conversation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13bac8c43485c160298a14b6d17e48f8a18cf34bf9b2f1c73b77cc45a82b577b The OpenSSF Package Analysis project identified 'wdpr-node-conversation' @ 2.3.3 npm as malicious. It is considered malicious because: - The...

Malicious code in wdpr-geolocation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 23c6da3fa43792d291a24c9eeca7d79482936d1a779c6f82840330096ab08cce The OpenSSF Package Analysis project identified 'wdpr-geolocation' @ 27.2.7 npm as malicious. It is considered malicious because: - The package...