Malicious code in school-task-tester (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 68ee519ca1ab3166481b83f77e489872146bf1fb26bfe3678f16da5e5aa169a0 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

Malicious code in web3tool-rpc-methods (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e90705834b05e292cabf72529d908456c4f3768af2b34604147b5ac6ec38363 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

NodeStealer 2.0 Poses as ‘Microsoft’ to Hack Facebook and Browser Data

By Deeba Ahmed NodeStealer 2.0 is a variant of the NodeStealer infostealing malware, which was taken down by Meta in May 2023. This is a post from HackRead.com Read the original post: NodeStealer 2.0 Poses as Microsoft to Hack Facebook and Browser Data...

Malicious code in storyblok-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44e2fc216a94eece7f4dff23344c885f24361cb497ae18d6c7dde8ba3c4d39a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in elastic-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbe3c8eb7407200d7e0976f17ba59d709e62dba4fc1291d71efa92c6761c466e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in superset-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fc7141b3b668363f8f3073951d4253466c6ff87bd1212f3e6a7ac19609a5003 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rhancis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc33fb78ec5c895246ba386fed24b5d490e42c1679729f9fc95c8d004b397b4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca_ivan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0761e4cb4957c3cdb2da290303672b71412107a385cb36c4de428110178428ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

July 27, 2023, update for Word 2016 (KB5002456)

None None...

Malicious code in hui-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8adc0e25b0e392bbe784365d11891947d5c83abb33b0139293cb33f97b7347d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-anup-candy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1b28b1796fa7c3129bcc7b1876c33e7f83c54d31ecae39ceb59f543d2194f28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in afterpay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d65821f7845bf39a23f9778347a76ca151807656e577af383b74fbef0eaf7c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-nguyen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 325b1db59ef74456937dd3909ac729db47da97492af691b2b78469589bf5bd6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-tuong (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13d79cf7f0c8b529c853f6fad71dbc1ce8655d7f7356cf001fe8c6b5142ed7a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Qatanna POS Software 1.0 Blind SQL Injection

Exploit Title: Qatanna POS Software 1.0 - Blind SQL Injection Exploit Date: May 07, 2023. CVSS 3.1: 8.8 High CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Application Name: Qatanna POS Software Application Version: 1.0 Link: https://www.codester.com/items/42053/qatanna-pos-software...

Malicious code in velor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8dd8323c45be30eda6a4167c8e3799e4d598711e2568b55238dfea09e727326 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Amazon Files Lawsuits Against Fraudsters Peddling Fake Reviews

By Waqas According to Amazon, it has already taken significant action against 94 fraudsters operating in the United States, China, and Europe in May 2023. This is a post from HackRead.com Read the original post: Amazon Files Lawsuits Against Fraudsters Peddling Fake Reviews...

Malicious code in pesa-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35638e48d3366cc403349a519a4cfc7af6213a9eba4622bbeec1ee3e8ceb3449 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

New PowerDrop Malware Targeting U.S. Aerospace Industry

An unknown threat actor has been observed targeting the U.S. aerospace industry with a new PowerShell-based malware called PowerDrop. "PowerDrop uses advanced techniques to evade detection such as deception, encoding, and encryption," according to Adlumin, which found the malware implanted in an...

Malicious code in legal-footer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 889df12ead796af3e20b965b76b67dd029c687100599b2435933f0c7e82e8f53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...