Malicious code in serverless-infrastructure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bebbd005e7aca2a94388399022dc43f7cafb873c364c88ccefdd1d1d823f0134 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in colors-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b36ae9b59011439265f622f08d6873bd4dfa0eb2c1da65f0ab540d273346d1f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yandex-money-currency-info (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1646902a2c5056651aa75b1e9dba62a1b6914ad5a1218786728bc09d32d19d61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pedrolinsisi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b9b54404e304f138b807108d75affd7f167ad0d4311b8d34fbe7b98277334ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-servicefabricmesh-samples-js-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9207358396a5f8d98f25d034f891454201ecb99f78ce4172e2b030a4facecc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eg-distances (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2aeb9259a60c97b6240a83817a9b26d16c3fc27740678ce87ac53ae3222a1fc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in katt-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7d7f580b5ecd39e9051ffb007515360137d810d861469dd34f18ca4afe15446 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vc-push-receiver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50bdb9564abfb7a869e4f497f2f86f6def5718f05a91105c4cdde6a86a7665cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in example-google-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa9acfa49bc966fabab653f30edda5447ca4129ec52665880e6e61b5a904a90a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in alpaca-oas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a68a07a8506d5dcce370260e4c897a0d0fcfccfc0e10eeb83a02284cd0ff55fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nft-tutorial (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38d7e830998822852cfdc7d65b1108670a8d9becc819e2c0b1a538c685569b98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vso-workbench (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e83ff4e45823ca3ebdebc2d5dd79142cc80f0747161b2555e2593073956d4318 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ferris-design-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d39e6c2f612ba9f7a57f24e5c9f3bc6ebfb7bb77ff6cecfcec29132853cde13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ddd-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d8f62ef9b886f760d717d97048fb305e00ee0d808ba286afabde024398a2159 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in epic-games-self-service-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6501b1f84db73620714317259c6392ca56fa12e75e553ad8303ddeb8e0eabdee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gulp-browserify-thin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ef843cda125c2cda337af64084a57a7a79a488e977a9ec4ca912704ab2059c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

US Disrupts Russian Botnet

The Justice Department announced the disruption of a Russian GRU-controlled botnet: The Justice Department today announced a court-authorized operation, conducted in March 2022, to disrupt a two-tiered global botnet of thousands of infected network hardware devices under the control of a threat...

New Variant of Chinese Gimmick Malware Targeting macOS Users

Researchers have disclosed details of a newly discovered macOS variant of a malware implant developed by a Chinese espionage threat actor known to strike attack organizations across Asia. Attributing the attacks to a group tracked as Storm Cloud, cybersecurity firm Volexity characterized the new...

LemonDuck no longer settles for breadcrumbs

LemonDuck has evolved from a Monero cryptominer into LemonCat, a Trojan that specializes in backdoor installation, credential and data theft, and malware delivery, according to the Microsoft 365 Defender Threat Intelligence Team, which explained their findings in a two-part story 12 on the...

Malicious Package in bpi39

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...