Service System V Persistence

This module will create a service via System V on the box, and mark it for auto-restart. We need enough access to write service files and potentially restart services. Some systems include backwards compatibility, such as Ubuntu up to about 16.04. Targets: CentOS use...

Malicious code in package-f (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1deec43d176fc23dbd4cb44b3e1d4e90821cb98e441004f83c872d49ca281ac9 Any computer that has this package installed or running should be considered...

Malicious code in csv-parsing-xyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 363b0535fad3e1200b4ecbbcaf6864c57f005f66af100032426235146347282e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48404 Malicious code in akdump (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 768e342b3ebe7ed62b20a4c11a721d893c64dc61ba45f4933d52d98b6c9d1135 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48408 Malicious code in company-request-access (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e49052755a86ef81d8b6c55e055db2639127cd68573b30d2725ed12e8e0d61ea Any computer that has this package installed or running should be considered...

Malicious code in company-request-access (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e49052755a86ef81d8b6c55e055db2639127cd68573b30d2725ed12e8e0d61ea Any computer that has this package installed or running should be considered...

MAL-2025-48327 Malicious code in internallib_v600 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a2f6cf9ace9deb6352b5110f9550afd90c905590229ba3a589e3ad7cbb8d67f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48342 Malicious code in scr-database (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3902b02c9664e32f82d280e45ac58ec3cd3bb57766bfbffdb7a11b845f20b9ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scr-theme-production (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43b9b215ec9dee5723751b479575e1aacae2e38745b6504033b95b3da6f4f49e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48323 Malicious code in eslint-config-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8136cf5c3645f0d663343578a6f6592474f35014323fd59a5cd067962473bb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-1.2.8.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f458f275324cf68bed67b3ae284456b3688dfd9634450c5a03f39552352ea625 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-1.2.7.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cba7624ffbb89eedecc7a43ac6061c7603bcfa4e335ba5191657b946b130a090 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48330 Malicious code in mad-1.2.2.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8581344d42c56e66d806f6be8795e636e5e5495d0dafa642fc09a6a4d22b2979 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

[SECURITY] Fedora 41 Update: valkey-8.0.6-1.fc41

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

[SECURITY] Fedora 42 Update: valkey-8.0.6-1.fc42

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

Malicious code in vite-babel-plugin-es6-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19412e443845747fa7d9b029fb4b869a17e57e3fc01783407a17684f0e1ad1d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-tediter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbb4dfd10d5fb2961d7f32f3aa273844ef4a62f7eb9dc971e9213d5babb3e0a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2017-20203

NetSarang Xmanager Enterprise 5.0 Build 1232, Xmanager 5.0 Build 1045, Xshell 5.0 Build 1322, Xftp 5.0 Build 1218, and Xlpd 5.0 Build 1220 contain a malicious nssock2.dll that implements a multi-stage, DNS-based backdoor. The dormant library contacts a C2 DNS server via a specially crafted TXT...

Malicious code in tailwind-style-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 405756ca6b244b2da943e5c301d715776df3e507385f429dc2a6cf091a682931 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in simple-icon-maker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8809c0049ae5c8b8cd198cb99abd3b33d600799607d44fc77777f9b0a711eb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...