MAL-2023-723 Malicious code in react-advanced-breadcrumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43ca4841853fdec8c951bcbb886eb3fbf01574178c614c25db2ed6a608d31d45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-182 Malicious code in clientcore-onesrv-businesslogic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fe6788e28c51766bdd46a7836833f82a888c11518f4d6ed355e8192822f70eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CertVerify - A Scanner That Files With Compromised Or Untrusted Code Signing Certificates

The CertVerify is a tool designed to detect executable files exe, dll, sys that have been signed with untrusted or leaked code signing certificates. The purpose of this tool is to identify potentially malicious files that have been signed using certificates that have been compromised, stolen, or...

Actors, Threats and Vulnerabilities 6 March to 12 March 2023

For a detailed threat digest, download the pdf file here Summary For a detailed threat digest, download the pdf file here Last week, HiveForce Labs discovered three threat actors. One of them is a Russian group called TA499, which has a history of conducting different cyberattacks such as...

MAL-2023-662 Malicious code in owa-strings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e11e49aab0abb7a01a703ccc6527f87fb4d48ccf2f542466b209e0bd4ca1b2da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-664 Malicious code in owa-trace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2730f76c4a2f75133740b824ee87e42529cefc04f9dc35ec99403ffc56fde0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-494 Malicious code in hardhat-web3-utility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b492c5ccdb582dd43eb84cd6e87f55f91de39f0367ce38fa7426091cbccb908f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7499 Malicious code in tpramcced (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7aadf6724e3fed19e833d53b352b2184bd7c77f1d91623cadd102ce5c64fa170 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tppullhttpping (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 22bcd803fb892acd48b70105f9a144401c443d69ea5eedd300486f8e567c954d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3534 Malicious code in esqvirtualkillsuper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 276446b73af8761e1cabca4b48c4790251426e720060343c652fc9014f8a7a7b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3145 Malicious code in esqnvidiavmget (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7deb2019d188b5eaf148d902f02cd38a8eff9a50fbac44e2dd28fcc5c2a59c29 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7004 Malicious code in tpedpingpull (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 11f4d7c605383159fa0db77ad4c21a78e35902ec54ff3d7d73fba8ef10175848 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4003 Malicious code in libgetmccv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 21a7eb86d269919282405cd1d71bf464c6a1edba9e97d2907bade4c0275a702a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6489 Malicious code in selfproofkillcraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2468a453cabf6f697c8fb0cc79b918a1586c077804e0a44db844baa5c06839b1 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4988 Malicious code in py-adintelint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1969dc90d39ee040c1596524f2d1c29515ce8d59d0ef8f1cbf493467d936fec8 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfguirandomultra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 82275c6932c6fa6638c560ff031b9277b265bda06f66b447090d5bd5c4f2b246 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tpintinfohacked (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 97e122bc05f107a14f1bd656e5401ba93dacc5a396bd910c257e535bf4493eb3 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3912 Malicious code in libcontrolpyinfo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 052a76daef20100e45e21c693ed7b75c3d3e134faeb72441fbec0d0382e2a48e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5211 Malicious code in py-infokillpush (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f7572325730cf8cf134391e0a57e436b39f08d7a7b1ccbaaac421923941577c2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5776 Malicious code in py-visavirtualpost (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx de2c8ea3bfaa0abbdb6bd5d7fedad72fd0526bd8739b8f38c7b0ea6da82804da EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...