Malicious code in discourse-prepend-tags-in-topic-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92350ecb9e8659fd910c3b88148c640e30f10d91dc85281846d315f339b33c6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in epam-promo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9010d89d43468effad6f95aa752b6d6559e3bc742d87f712370618e645ae798 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in manualtestapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9dc16d3926c0e76264ab6355578f20892bb183ef802e1ee88c00c04bfb790a40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blockchain-wallet-ios (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 115182d6218da72cd6f3f3460eadba87a00de07f6df9bca534a220605fd26c4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in doom-workers-site (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea187c65ee7f8768c6ebe755e79017a5c014e3892dd3c10a6d81a698f285580e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in reorgs-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b13830319a43af9887566ccebf66edc38aa622d4ef7464ffdaabfd9a41942ea1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in v3-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45439087657c838afe562f7ee8545fd01977fd0ee167e284431a7a0025cfa62a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pulsar-sink-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 070f0b44c85eacc9844228f051f76116795832b0cbe1edbc8cb8c963c31b2c27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in frontegg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc38523beb96cdde6acde02f9c3bd3ff0c0b5f5fbee032f8d4c2ea9e0aae6bdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in opensea-ships-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3635ace2bf4429178054ef42ceb3653e6f2645d6c6d209d2fd0fdd305778e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stargate-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89c323abe1bd39592e6c291338672f12507aaac108a86b569edf4cc8af4a329a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in du_npm_integ (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2244883b8339efbd2bb7b97adb76d2fbf350e6b4913aa9907e6125a3ebc77aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vso-splash-screen-terminals (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a406d654e1a2ccf2bf08779d9dcf2f5c58ba3be8b211f2254a521995e7f8cdf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Updates for Microsoft Office Products C2R (May 2022)

The Microsoft Office Products are missing security updates. It is, therefore, affected by the following vulnerability: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity of the...

Security Updates for Microsoft Excel Products C2R (May 2021)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-31175, CVE-2021-31177,...

Threat Roundup for May 27 to June 3

Today, Talos is publishing a glimpse into the most prevalent threats we've observed between May 27 and June 3. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral characteristics,...

Malicious code in @manomano-toolbox/api-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db95524e5bf90907d13f9109419d2a10727fd9549c599cad79231ab6359745f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ai-aws-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 517e9823176bb273ea7322f08c73acca00cf93f85cd107018813004a1811f088 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yoti_2020 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec41fbfb14efe2e116f592623716f4c4a245d5a7c0a1b58913cef95948e649ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ddd-demo3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2eac035e89513982d440328e69c5d811c0540172b7b17a393a37b67685b57784 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...