Malicious code in test12356666 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02a28d9437b4ca65594c4ff3be9bf6348ce5da5e88c5d8c973775458fe106901 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7983 Malicious code in resumecom-validations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb71bf1cb4ba925079e4cb0146386da6304565a1d20cdb7cba37959876f36320 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7964 Malicious code in interpolation.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c216eef4006912b09fcaca7e8b2c6232011b6835566014d1588d986d1c1dc6c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7950 Malicious code in dx-event-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71179e532e0a9ad66fcf86c05453073081f7e77c7ffc4846697e843fe2ba1ac2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7936 Malicious code in bankrate-stuff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 857d78d4a0691e2714e3c43f0001af9777c66644e48d145cc3ef19976a4feb07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in taap-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f930b144bfeff9ae5cad20835a228bc2a413884c7a07d9fc5a6b6df8554d17f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7935 Malicious code in bankrate-iconographyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d00e59c6535155e2b679c43788644b735299b33970efa0999a702f82ec203f19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7980 Malicious code in orion-all-6.0.2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69cdfcd30937378c6d65748e8691cd457c6371491dedb166400380429d98ade6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8003 Malicious code in viewability-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d6ab3215e22d1ba76d15137a6915fc6703eb21620b8821706dc5b006ce735d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7981 Malicious code in react-bs4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78bc438299611b89dd8a16ca1b19661e9606898bbc7c61bebd4bfd59fe8c3134 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7968 Malicious code in kiwoeslw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bae85e2f36251f9936fb3b965298a113bd8e3f92666f152e5882d69c935545bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7973 Malicious code in mapbox-maps-android (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6283105b5c07939844bd2730cc42bf4c6e8d9bbaf713a147707078aa4e14a4d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7955 Malicious code in fabricexample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4137c5f31f16d594edda141045f7330412108a4d9bc3bb7f4786e8d6e4c09eb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in litebs64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 464eb08865be218f66f621469eb82604a3a6ad516b41dd52a8232eb595a832be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7995 Malicious code in theme-bahrain-nb-hdddc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22b870164e088eff8d02fbc7631e1a1635a1810965e38de6362e8d93dc02434d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

China-Linked Hackers Compromise ISP to Deploy Malicious Software Updates

The China-linked threat actor known as Evasive Panda compromised an unnamed internet service provider ISP to push malicious software updates to target companies in mid-2023, highlighting a new level of sophistication associated with the group. Evasive Panda, also known by the names Bronze Highlan...

MAL-2024-7889 Malicious code in permenmd-track (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db6efdc7a6ea747eacdf9b6dbd68c824e07aa445ac5c745fe847bf13866414c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7892 Malicious code in prmnmd-tuls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 422a0a19eabc0aeb101d13844348daed919589aa7aa3b6567c3146a5850c7678 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Obfuscation: There Are Two Sides To Everything

How to detect and prevent attackers from using these various techniques Obfuscation is an important technique for protecting software that also carries risks, especially when used by malware authors. In this article, we examine obfuscation, its effects, and responses to it. What Is Obfuscation?...

Malicious code in nodebs58 (npm)

The package contains a preinstall hook to execute unhook.js, which has cryptocurrency stealing functionality. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06acfd91a86ac73f0160fab5b4c198882f9f8dac8617c79b28f62ae487cbcf66 Any computer that has this package installe...