Malicious code in node-wavehttp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f86a00e28589e2a90709cc928ecf437d7df51dbe5685e8aa68dad43c7df6f77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in placeholdr (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7d66d11f753c13ea251285ba697e1ec1be39a242effd08950d5fb3fff850ca7 Any computer that has this package installed or running should be considered...

Malicious code in pupeteer-capture (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 021121bee5e4389860a59c8fe51ff445ba8a266672fc246bdb5eff63d96d1c5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/nulla-optio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e89a3ade2b8000f54cee1cb435a75e205d0ae04cf62fa87e6b8242de8683523 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7446 Malicious code in footericonds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bba3e29d5f7e109bd3c7e3fad6164aa065c6932c582b75f742b4d121f3a6fd7b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in updated-tricks-roblox-robux-generator-2023-get-verify_malware (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in metronome-synth-user-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b163cd49732602b28b6b142d2a9713bec7f4ce6d9a63d09bf334c2415c8829b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3085 Malicious code in fluxible-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18050fb94fed8eb024bf4000d0482ed1602bcfa2cfac0aa836a570c80b390fe9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1196 Malicious code in aws-delivlib-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e32519bdca9531e7178bf6e327829361c7be2d1a1e53a816e99a00325b28664d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-yandexuid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e021736e7fa94fe326e11ab69e9a69f63fa749aabdf68f5848bde6132a3a99c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.modules.cloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73fa5561168828ff20e8d08cc6c12e8de395a63dcdf1e1e742191a69e8a03539 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3134 Malicious code in free-fire-diamonsd-hakc-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01dd727b615eda36a111eed448a3e95546f23e6f60533ecf10c2b80404bff3e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-274 Malicious code in @firecracker-microvm/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8236413fb62d06e91b2b92e2f28c0616770da58942a69c29277bd2d2fb8d81f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-94 Malicious code in @azure-test2/test2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2768ecb9a8286366492bf441b8138e8288dcaa230ad23edc23ae4d1da9769413 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-0704

creationtimestamp| type| source ---|---|--- 2022-03-16 13:20:21+00:00| seen| https://t.me/cibsecurity/39015...

‘Twas the night before

Recently, the United States Cyber Command USCYBERCOM Malware Alert @CNMFVirusAlert highlighted several VirusTotal uploads of theirs - and the executable objects relating to 2016 – 2017 NewsBeef/APT33 activity are interesting for a variety of reasons. Before continuing, it's important to restate y...