Malicious code in vc-push-receiver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50bdb9564abfb7a869e4f497f2f86f6def5718f05a91105c4cdde6a86a7665cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in example-google-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa9acfa49bc966fabab653f30edda5447ca4129ec52665880e6e61b5a904a90a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in alpaca-oas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a68a07a8506d5dcce370260e4c897a0d0fcfccfc0e10eeb83a02284cd0ff55fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nft-tutorial (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38d7e830998822852cfdc7d65b1108670a8d9becc819e2c0b1a538c685569b98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vso-workbench (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e83ff4e45823ca3ebdebc2d5dd79142cc80f0747161b2555e2593073956d4318 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ferris-design-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d39e6c2f612ba9f7a57f24e5c9f3bc6ebfb7bb77ff6cecfcec29132853cde13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ddd-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d8f62ef9b886f760d717d97048fb305e00ee0d808ba286afabde024398a2159 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in epic-games-self-service-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6501b1f84db73620714317259c6392ca56fa12e75e553ad8303ddeb8e0eabdee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gulp-browserify-thin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ef843cda125c2cda337af64084a57a7a79a488e977a9ec4ca912704ab2059c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

US Disrupts Russian Botnet

The Justice Department announced the disruption of a Russian GRU-controlled botnet: The Justice Department today announced a court-authorized operation, conducted in March 2022, to disrupt a two-tiered global botnet of thousands of infected network hardware devices under the control of a threat...

New Variant of Chinese Gimmick Malware Targeting macOS Users

Researchers have disclosed details of a newly discovered macOS variant of a malware implant developed by a Chinese espionage threat actor known to strike attack organizations across Asia. Attributing the attacks to a group tracked as Storm Cloud, cybersecurity firm Volexity characterized the new...

LemonDuck no longer settles for breadcrumbs

LemonDuck has evolved from a Monero cryptominer into LemonCat, a Trojan that specializes in backdoor installation, credential and data theft, and malware delivery, according to the Microsoft 365 Defender Threat Intelligence Team, which explained their findings in a two-part story 12 on the...

Malicious Package in bpi39

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

pandora-doomsday is malware

The pandora-doomsday package is a malicious package that adds itself to the package.json of other packages discovered on the victim host and attempts to publish the package. It has been removed from the npm registry. Recommendation Any computer that has this package installed or running should be...

Windows Malicious Software Removal Tool - February 2020 (KB890830)

After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software including Blaster, Sasser, and Mydoom and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you sta...

Malicious 󠅮󠅰󠅭Package

Overview All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious 󠅮󠅰󠅭Package

Overview All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious 󠅮󠅰󠅭Package

Overview All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Cops Take Over a Botnet to Clear Malware Off Nearly a Million PCs

Attacking Iran, a web host data breach, and more of the week's top security news...

CVE-2019-13567

The Zoom Client before 4.4.53932.0709 on macOS allows remote code execution, a different vulnerability than CVE-2019-13450. If the ZoomOpener daemon aka the hidden web server is running, but the Zoom Client is not installed or can't be opened, an attacker can remotely execute code with a...