MAL-2023-98 Malicious code in anjelo-dev2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bec068f3e56304c48c4c48eecfb4eb7fd2c133a59aee2adf16f1fef8d870e18e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-414 Malicious code in fca-mod-hrz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63829e3df05a630b9b8a409f30545af4dc6048ce41b951d014a6e6397e8d57b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-695 Malicious code in pretty-literal-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 364c533f74b84a92914fb0654862ca1daf2f125812bd1fba9f8a8f112c773248 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-916 Malicious code in typeahead-client-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9121846b93247c8f8db2f98b553de9231e63282325f9bbaff65e8b6916d2a6cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-756 Malicious code in samplepackagedemo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c55c21d2ed72077608698c710d7eb69de600ca8f9e45b448f7b5769c6bbf0c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-967 Malicious code in wix-commerce-ticketing-nextjs-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0b99bb56f643f4526ad69d487c48bec96603f7a221baf7ed0637b6cdb74d3c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-399 Malicious code in fca-horizon-remastered (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22e4b2051f69220a9caa031f9973e92468b01c05b2c9688ea2aa5e0931e8467e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-605 Malicious code in mmqs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d86f79853ff387ce4589a3ee123c6fdf54950b6505232c969c3a0e3ac3a1e1b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-589 Malicious code in mesos-term (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ca86e4f7655ee05071ef73a17f239df8dcc483b932ef71d351cf47e8435376b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Threat Roundup for June 16 to June 23

Today, Talos is publishing a glimpse into the most prevalent threats weve observed between June 16 and June 23. As with previous roundups, this post isnt meant to be an in-depth analysis. Instead, this post will summarize the threats weve observed by highlighting key behavioral characteristics,...

Malicious code in yaml2stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1816a039a50de4469c1bede9e81c8e477e1103ba0fd8e76fda21bfcb8ed8fd10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-475 Malicious code in github_projects_page (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2d74bcd5a89a954b52e8b0d1326b9a1ffdd05cf108f14b84e984a2e0314abae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-825 Malicious code in sync-http-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 666c54b1098d52ea02eebf562d8cf02c1a736ee608eb15029543afd5181e4094 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-1432 Malicious code in ptrsec_rce (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5c5f0c378deb022411d3a83e2b929f8ef8f9ad8e8eedd366e0863b7eb25d8aea The OpenSSF Package Analysis project identified 'ptrsecrce' @ 0.0.1 rubygems as malicious. It is considered malicious because: - The package...

MAL-2023-755 Malicious code in sample-app-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a7432b767dd8bf532a686b3a40add828170682af3dcfdcab09c7d7a012a83e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-312 Malicious code in eslint-plugin-artsy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 489558294cd82cf59cd5486f7ce3fce82ec6c7baf9aaf9ba1edda5a1abf792a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-375 Malicious code in fc-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a94b568ae69bdc27fd6f57fbb8cb60fde1777793150449ba9cb6895756e03a6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-364 Malicious code in fc-radio-button (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83481051c5331447023a047dfc4f6f747cf968f9cbe6c214bd3baa3aa57c0348 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-374 Malicious code in fc-transactions-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b4aa758a82c1ef95eb8cec01a5206c1000e9ae259eab65eac788bb629690c5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-357 Malicious code in fc-mijn-menu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1239e10e2e52412b4a13dac91c28d9b96d0b6d6e79213b3d9a80d394f8e768f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...