MAL-2024-7861 Malicious code in @illimity/core-banking-state (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e4a29525c951e93fc197dc9c57e657855c0bac65e57ddcf12f6fb12c20dc281 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7864 Malicious code in @illimity/rtl-faqs-state (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b3cec0888ebd3cfb912bb1459486caca7109d7fdb2a980c28641e3eef38d451 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7868 Malicious code in wix-smarts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df57af06b1b5cd455e4d81a7d9979d518578a2b49fd8b99019d721270edefa65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The Power and Peril of RMM Tools

As more people work remotely, IT departments must manage devices distributed over different cities and countries relying on VPNs and remote monitoring and management RMM tools for system administration. However, like any new technology, RMM tools can also be used maliciously. Threat actors can...

GHSA-G872-JWWR-VGGM Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment

Description: Remote Code Execution Vulnerability has been identified in the Message module of the Admidio Application, where it is possible to upload a PHP file in the attachment. The uploaded file can be accessed publicly through the URL admidiobaseurl/admmyfiles/messagesattachments/filename. Th...

MAL-2024-7850 Malicious code in ent-widget-phone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7313a06ff628db941fa9330887fdea43ce979086e4ce11ef7d0c0041a9a0f9b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7854 Malicious code in testalonimaurice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80ad03064c65acf925c16881cf35e79cbd2aac0bda615b6793bdf329bdeccccf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7851 Malicious code in income_access_npm_config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51d9955aae12e69e264784bcf65382bde7741326c5841d4a06389474e6daa09b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7820 Malicious code in sendapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 293c4e6568da723c801c3e4e60c18d4384908f054f67dfce8cc6769a5dac1f74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7807 Malicious code in webjsflood (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41cce5996b48499aa091e08036886fb6c4b75bad613669a6f278e24b01bc11d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7798 Malicious code in smart-input-checkbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d35a2894a65ccf5f422531f46846b2cc71d5e0e28a3e0d7b6e9ed1b0daa6a69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7760 Malicious code in toolbox-controller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08eb63c88d757784c7886fd9e365d836ff111c5c27741eef78fed201a5e485e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7764 Malicious code in evil-hitcon-2024 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbe1b43a902dc36ccbd6d7dc4e8f50682dc9580bc0bd95e4a572151f480e3116 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zonduutest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd104d918d42d9fb61de1d1e24a2c632f2bf39f504ee6c16322e55ca3c977b16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7756 Malicious code in moto-test-int (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2387221aed62494dae4d55fdace72a03b718b13dd18dec7ea97b0df19d4865f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7736 Malicious code in crypto-ops (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1553fb7d7d1ca058c26337308435b8b0bd7cab9f04546e8c72e9799ebd4dda5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sap-alt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9f7b53e22f89739f4853a3994baf6285d83c6de7670a14cefcbe1a1df754163a The OpenSSF Package Analysis project identified 'sap-alt' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2024-7522 Malicious code in sap-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 58420a49ed777d835cee58dafa044a3b2960aae4ff06d85f920dd45618e5f324 The OpenSSF Package Analysis project identified 'sap-agent' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7714 Malicious code in komcaxx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e16d460077fe5867d93cdb883add5647909a7ab4fd8fbd15016821bf60682b9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7722 Malicious code in tilda-date-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b98b7d3c762a3af730da420104e9016e9ca64e0313f7195afe1a8b29be029275 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...