Rapid7 at AWS re:Inforce: 2 Big Announcements

This year's AWS re:Inforce conference in Boston has been jam-packed with thrilling speakers, deep insights on all things cloud, and some much-needed in-person collaboration from all walks of the technology community. It also coincides with some exciting announcements from AWS — and we're honored ...

MAL-2022-3277 Malicious code in gather-electron-interop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 555d7a68ccecdb496e00c51f24d61369422e81fe64f0c26ead5b2512c5b85648 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

What is Steganography, and how can we Avoid it?

What is steganography? Steganography is, broadly, a type of covert communication involving the use of any medium to hide messages. Steganography is a relatively old technique of hiding ‘secret’ data in plain sight to avoid detection. Seeing a resurgence of late, bad actors are taking advantage of...

MAL-2022-3260 Malicious code in fzsknvyeqakgmuip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a03731ee46211f771ec6d0f0bd28ff0f685025cb4f661a544cd772d6516632ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6317 Malicious code in storagefileshare (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ba880ef78e28b679db29d5c97b2b5ce64ad028a61a1e16da13bc888f59cc43f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6923 Malicious code in videoplayershakaperformancelogger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8d2832b7b40b0f81bcf38feb52c26aec84528baf1093cc1850d4319af3cd6d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3865 Malicious code in intern_scocco_rce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 965c25b46e74bee53f5e2b65ead806a47bc0e127fd1cf91f29ad31b2e460ecb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2087 Malicious code in com.unity.modules.unityanalytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26a89dc0dcb8d78e74d737c8c117ed9c2ef33e97e0dcdc8449a71e84516205b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1532 Malicious code in bfx-facs-places-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dba300d1dc4e1b60247b4eb8b1245d1626140b9315edef5aa64613fde19857c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4556 Malicious code in mephisto-task-compiler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eeb820de958446255bfd0e51fd1b7f9301ed6fdfb324b2e7d5513181960c4b02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1356 Malicious code in azure-mock-hub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f97bad1e0989309a92b20d090efcfe32618ba7883318c3e3f4b17be60a558f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5285 Malicious code in perf-identity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3bda53456f97f07496332b3abe3ca16054f9a5b0c18627a3d1427a3f417c2a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2043 Malicious code in com.microsoft.mixedreality.toolkit.foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 263c060bfc159c6ec15abeaea9e25a0ff51e0cae3c061ff742788722cf44e3df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1347 Malicious code in azure-keyvault-certificates-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d4a4dd27ca78c3baf11188004219aee2dde382de300b316e2276af5c2613b81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5237 Malicious code in payment_method (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcaf8d7ef9b2e7d4df92b29894c629acbc28978ee0fc89ae8d1b8ce4f45268d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6149 Malicious code in skfb-viewer-protocol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4927fb8f7bd066a5440285ee318f12ff607b41497351c980b56408dd0b35f244 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4696 Malicious code in moralis-websocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14634273e48d41bdb2458210235b37dfd6b2533ee98bbb97d873674841041de0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1297 Malicious code in azure-arm-workspaces-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25fdf3e3810b11986993e1ee312d73c2be2e122399ae83f6c577f58853782c50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-275 Malicious code in @flameshot/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8bbca4a9cd0a35a35928860188f38aa877f6edfa6b4eb2b65c110d2d83990bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4599 Malicious code in minicom-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0b6d5fc5d5d4708748782996c729a230d935ad5015d7e45fd191ae434c74814 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...