MAL-2023-8060 Malicious code in chatbot-community (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0efbc44ac9dca194b96671df266fbb4f449c8641dbd574942431ab11e983f471 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8048 Malicious code in fiji-core-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 030c12f26f1b90ddf92e5edd56243d4b0a357d44d867c5ee071e544a490011a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Russian State-Backed 'Infamous Chisel' Android Malware Targets Ukrainian Military

Cybersecurity and intelligence agencies from Australia, Canada, New Zealand, the U.K., and the U.S. on Thursday disclosed details of a mobile malware strain targeting Android devices used by the Ukrainian military. The malicious software, dubbed Infamous Chisel and attributed to a Russian...

Malicious code in emonnn-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 861a042d2d8ede299482b2e5d50d000124de34b4a0d31abafdabbb9aad1e2a7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wallet-switch-chain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d7691c4b893aae23a99dd7bc91f8757ec2b3df3b7c311fed6fc4be65dda85fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7961 Malicious code in web3-provider-patchers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3da847a0100e6d34ec1eaaf261644c00fcc8342f19bf86f01da33f61a7fb9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

North Korean Hackers Deploy New Malicious Python Packages in PyPI Repository

Three additional rogue Python packages have been discovered in the Package Index PyPI repository as part of an ongoing malicious software supply chain campaign called VMConnect, with signs pointing to the involvement of North Korean state-sponsored threat actors. The findings come from...

MAL-2023-7968 Malicious code in mmolecule-elasticsearch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4066df1016d7aee5ec19b765089b99b9b47513327cbbe8afe20985bb3fbda37b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7946 Malicious code in @apex-ui/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4019e99da7923a93919d8a184b8ea6b720e390e1ac8d94deef47992fdcdb238 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7950 Malicious code in discord.js-v12-lukyy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84f8bf74e566b2971105d1d8482b27bb35a3cd1aa60def4e10b9ae09a4397da8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7929 Malicious code in @webquote-ui/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7a932d7cda6b4ad8af3c7eb85920a296bdc3eecb9b8b2ae8b6445a5a6cb3698 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Decoding the DNA of Ransomware Attacks: Unveiling the Anatomy Behind the Threat

Decoding the DNA of Ransomware Attacks: Unveiling the Anatomy Behind the Threat By Trellix Advanced Research Center · August 28, 2023 Introduction Ransomware, a malicious software that encrypts valuable data and demands a ransom for its release, has a notorious history marked by its evolution fro...

MAL-2023-7909 Malicious code in discord.js-selfbot-v14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3528a4508610b7617935e551ba3910b26524b8d515354d49c10f939bd73c3ae9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7904 Malicious code in funcraft-api-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a26cfbee7915882a36f6b1213f8779104f879b89ffc82f599aeecde077717859 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1509 Malicious code in @lg-private/mongo-nav (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cfb13dbbdcd525742b9cca74fa4bac901e7a3e1601a9dba4e97986336210dde Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1513 Malicious code in business_api_client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e772f7acd6aafe36bc55e0babdbf512099d3be6de9a89e4dc31dce423b9f5753 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1526 Malicious code in urs-remote (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32d0470f35ccd55fb33289039a2265e1aae264f539cc0358f9f21b3557d5ec5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1530 Malicious code in usaa-progress-indicator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bda554520601e00fc54bc5db28faf1d16fd41ea1d00cc51dc62e9a8b7e4eb1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1532 Malicious code in usaa-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35bce4289bb065eb9e1460adcc822a34e49647575381e636708872a124ddbf1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1512 Malicious code in browserslist-config-usaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f08f5ede6b0f56a4b6366c22c4622d7cddc43a2d689f021f8a179e72c2fa6220 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...