US Names One of the Hackers Allegedly Behind Massive Salt Typhoon Breaches

Plus: New details emerge about China’s cyber espionage against the US, the FBI remotely uninstalls malware on 4,200 US devices, and victims of the PowerSchool edtech breach reveal what hackers stole...

Malicious code in @metrics-service/mf-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4515e226dd4aafab225dd128f71075baadf1fc7b2176ed97b19e90ae8aadb642 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12000 Malicious code in maplibre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 812bdb7f3cb3a09a616e906c456e223c0069b42451a78c0df8d032054ec3f6a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in confidential-package-nam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1ca97a7c95d3a7f0bc8302fdfa94f96077f03fa620c53c49791fa260617d310 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pobreiaia22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f201a6e789edf5a6b86e429b07c01f4098e234a4860594f42d18fa8590259208 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nayan-imgur-upload-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b98ebdb98b3110329cb9db3c496ef6fa0d0f21bcf8ec8302746d6f47b0cf884 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in smtp2go (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ee3777f995fe5a08e581e345e2f1b39a3c0a271203e9f97f6105bc1dafc3053 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gaming_token (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50f300010193f83d2adba7d5cf4a6e9ebf54f0e40c67e1ac0fc99f5255bdfa53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in parcel-plugin-lighterhtm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 415194ea6ab6f715cf5f3ce8ee4f2b08597339fa35641457a333aed6ff9109a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ssc-mobile-ui-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 507d08246309bb808224e6ff0e29b7851aa213012ba3755f8417e30c9e115fde Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in htp2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2f646abc54192dce6f7771d42de7321b233e28eec8e74a93f3d6ba8bfff37ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in duckc2-v5.2.3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 312f10b261529061f06f146485b626f5ac5f86887bd775baa9cc015f430d1e07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/veritatis-sapiente (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46428410c5596e80d81f26d80e3d107c1bcc6f4026b07bab528cc6a10f31a20c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/molestiae-quidem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31ddd37412e61fa7f032f8c8e6fcbb3e2c84b9a8869ddbc4739682a47a823f12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/facilis-pariatur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 521670b04d11dde517858e57045bd156fa430e5572485f7480cab02360a7ffac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/dolorem-dolorem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab92bdb061852057c037e9c222165d2f5122aef35da6d4e7359e6242672171ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/dolor-earum-quia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d700c9e6da7b84a19b42ed2466b0fe8ba51b97a24f185d84dd039164ff501398 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in side-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9233d92d37692726bc693958e27369fe68aa103372f8d54bc94628aa64e1bfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in teiwosjd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6603e4eb0efabf2f58234dae83f6477feb78b02fddfe5b3e0ce6988adaee2df9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/porro-asperiores (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c9aeca02bbb4df02fbc773f8c705450a285aa8c099718e6dc0484a2b71864c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...