MAL-2022-463 Malicious code in @nexthink/ea-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d60b0c697d1d8646d11b1ded36191c658ba88dbf0c8720c9588a866f0edc0ed6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nexthink/content-admin-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88211a3606fb6d72dc9409ded383558925170c70c7f1175d893d399fbf12d88f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nexthink/arm-jwt-decoder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51df48a51ecff12b69c9a30fb95f37dcd19cbf557c11e050fb5cd202e6a1d8be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nexthink/waas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fea500cbd428343297ead9c40ce1377e5a8d3f44b28a33129b2b80fe0cd2e737 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nexthink/engage-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 261969d8ab7bb5c57be893d75d5ac868b4c43fa2be37c4d22e0a97838b8e21ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nexthink/nql-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed6089c94dffe54b9e123b70149b90c04639fe737dd8fb1d76374e1fe91ad4bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nexthink/nxnavigation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43b45d0cc1ab4ad9811a9bef522b6f472032fc9b39875098b18a99fd880c5384 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-467 Malicious code in @nexthink/investigations-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96c7504109a0c5da8a958e741bf417d560564dc1a8270fb730254ff31f5f79bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-475 Malicious code in @nexthink/waas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fea500cbd428343297ead9c40ce1377e5a8d3f44b28a33129b2b80fe0cd2e737 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nexthink/apollo-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2442bca6d9a3dd356ea5faa389a7389021876ef535ddd23ff709bb803655af2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-456 Malicious code in @nexthink/apollo-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware faa168f6a74af14b39193cdea04f9798ab2d20f8ad531d396b5207580e9fc5b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-458 Malicious code in @nexthink/arm-claims-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a3636ee70cb43218804e15b0d03cf16ead6b5f9f1c30dcc389fb64996549aff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nexthink/apollo-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware faa168f6a74af14b39193cdea04f9798ab2d20f8ad531d396b5207580e9fc5b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nexthink/arm-claims-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a3636ee70cb43218804e15b0d03cf16ead6b5f9f1c30dcc389fb64996549aff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Default Password (123456) for 'nexthink' Account

The account 'nexthink' on the remote host has the password '123456'. An attacker can leverage this issue to gain administrative access to the affected system. Note that Nexthink is known to use these credentials to provide administrative access to the host. %NASLMINLEVEL 70300 C Tenable Network...