MAL-2024-8093 Malicious code in yyb-monitor-web-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e875b3137112fba7095315990205008d6a37bdd38cf6fc166b7a7f3de1ada1c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8086 Malicious code in noblox.js-threads (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff6e7081bd0620aa9d7475eb55589362075317d25dceecf4c6df7ce2230ce28e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8090 Malicious code in sweet-ruin-immortals-after-dark-16-by-kresley-cole-on-audiobook-full-volumes- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6ddd212ce30f7b7db65579b6f4be56f10137c104c7ab63553566ccd90a1ff3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8076 Malicious code in kak-kupit-aktsii-gazprom-neft-fizicheskomu-litsu-2me4khvx8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99620b87cd756e1af081ec0dd5e2508295d29be7a829db31b728ec4a1ba6dd05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8062 Malicious code in root-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b017b6da11151bb3106118737a866cd3fe5c2c11a83e17fbee2b433c37917375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8063 Malicious code in side-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9233d92d37692726bc693958e27369fe68aa103372f8d54bc94628aa64e1bfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8050 Malicious code in telegram-con (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4423698d3e9c78a69cbb237d0f5e731fc3d3cb87d359523298398d8ef719c8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8037 Malicious code in prettier-config-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4241fd6088878cd356569ae38a56d91f4c9f0819334d7fdf2fd40546ea6143e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8042 Malicious code in tsconfig-react-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4aff665839335434b8a93a1a8881d423eb7ff5ab92725d898e4db717468a59e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8027 Malicious code in @benasin_2/frontend-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4a339db60313e6c81672ce35a4c91e4a1c202c1a62cb5fff73c5a59c8fc9347 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8036 Malicious code in platform-client-messaging-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c2d8c135637c1c5dabdcf9238f0a282f34540de11eca662db70ccadf8260ed8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8030 Malicious code in @pampa-ui/pill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01554c6b881f5bdae92811e75e6e7be41ea76d7493fe3519c9c065c3c75141ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SuperMicro BIOS 安全漏洞

SuperMicro BIOS is a software from SuperMicro, Inc. that is stored on a small memory chip on the motherboard. A security vulnerability exists in SuperMicro BIOS that stems from the use of an insecure platform key PK, where an attacker utilizing a compromised PK private key can create malicious UE...

Malicious code in oz-merkle-tree (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 732a4768703da4c9eb31465258c2df9b93dcfcf2811b78c72b62d9dbf9b10053 The package is designed to exfiltrate basic data, like hostname and OS details, as well as collect information about the stacktrace it's imported from. ---...

Cybercriminals Exploit Popular Software Searches to Spread FakeBat Malware

Cybersecurity researchers have uncovered a surge in malware infections stemming from malvertising campaigns distributing a loader called FakeBat. "These attacks are opportunistic in nature, targeting users seeking popular business software," the Mandiant Managed Defense team said in a technical...

MAL-2024-8024 Malicious code in artifact-lab-3-package-b55680cd (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 be4896eebe0a6b7185d165cec1e593faea8a14a8b2386711ef9c08657273bb31 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

Malicious code in radioplayer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6556141379c5f4a05e6d6f79e61cd58affbe8cf738f0e0db1f9797fad19c8fa3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in benasin_logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8976a88d4fd270667bd1f7789de62b7f119041d63970f7c0a04c1ad1437c213f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7989 Malicious code in taap-bernie-plugin-pendo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53711d2f163bf531869a9b6c4b90c012e6cf7c59304f4fb4acc8ddfd60386fb2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7982 Malicious code in react-hook-form-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7657179ab2d7f76638491093d7c970bd9685b7228d96bf1014ee8ea15606c45a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...