Malicious code in down-load-available-zip-now-35816-laughter-lust-jih3q-fajkvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26ad3ddf2c98158b6229fefade7b53eaa9a4f56a81e3d7e161b268bf9030502c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in avail-able-albu-m-down-load-37035-boom-chicka-boom-bk3mq-llyzsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b2797f58177b66d9be1500b40bd7b910b50660e07b0b4b73780746fcfcf57b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in down-lo-ad-now-zip-mp3-6766-the-empyrean-bn3pu-tdpbau (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50bec20bf674a45f119e4fb003bb3ac0bce20575c1d225eb4816f20bc5e76549 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mp3-do-wnload-file-to-day-5794-street-hassle-pf8jn-wucrqe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5537f6c773804ab8c3d8b516b7f60c16b9b59aa3d4819fbdc5286b416ed6433a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in do-wnload-available-6472-sign-o-the-times-1-epmqe-uhykdr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c650588d0bf31ff36119366e5bbc38d01effa27b39e029b71922559d60caca12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in alb-um-availa-ble-zip-mp3-file-38068-its-all-about-to-change-rnonb-pzjjbh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4008f42b5bc2b6647cc2d9e297edb68f60da9ce6c5a20e62b44cb70616a8a6d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aria-web-telemetry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16ad0cfe7b7d9636482741603c31ea841100db6c7a18a17bf08ecbafc906fd7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

New Malware Campaign Uses PureCrypter Loader to Deliver DarkVision RAT

Cybersecurity researchers have disclosed a new malware campaign that leverages a malware loader named PureCrypter to deliver a commodity remote access trojan RAT called DarkVision RAT. The activity, observed by Zscaler ThreatLabz in July 2024, involves a multi-stage process to deliver the RAT...

Perfectl Malware

Perfectl in an impressive piece of malware: The malware has been circulating since at least 2021. It gets installed by exploiting more than 20,000 common misconfigurations, a capability that may make millions of machines connected to the Internet potential targets, researchers from Aqua Security...

Malicious code in redis-oracle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ea6e343b932f13174f4d2feea7f70dcf1900c9b51bf55a2abff025184ed0c87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GitHub, Telegram Bots, and ASCII QR Codes Abused in New Wave of Phishing Attacks

A new tax-themed malware campaign targeting insurance and finance sectors has been observed leveraging GitHub links in phishing email messages as a way to bypass security measures and deliver Remcos RAT, indicating that the method is gaining traction among threat actors. "In this campaign,...

Best Practices to Configure BIG-IP LTM Systems to Encrypt HTTP Persistence Cookies

CISA has observed cyber threat actors leveraging unencrypted persistent cookies managed by the F5 BIG-IP Local Traffic Manager LTM module to enumerate other non-internet facing devices on the network. F5 BIG-IP is a suite of hardware and software solutions designed to manage and secure network...

Malicious code in 1-2-customization-basic-format (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 126e6a02667bae4fef0e53e63993ad1bbf76556e75e37e0e74daf04a7cf00b59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in helri-shiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4d519e88d591f17cacd1c40eb414b21e026b9ea5d54240b23399cf203aeb084 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shmam-test-npm-test-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b028136f8820f808eb720a45a7f396272c884a63944c004999ce50781449b6d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oipmbq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46e04119c13c8a0345a00f9e3a56042c94d81ac8335560334f5692fb940c8fd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 1nzcej (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1049efd60580db19a51c86de897fceec13099eaa58f14c6e0c674a71e4d73f57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dhojpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 935ef1aec71f11b4c67fd9a9faa58e6a292dc183fc14a77ca23d83286ada95ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tyussc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2919b6823a5397f90493fa5d50af3ad884fdc8402364dccf5db82188c391d75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in working-today--find-the-simpsons-171-script-roblox-4zlhl1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d3cefb76914f2e2de82b39a47ae4865b79f9cc0486836bd0921b4eed69522a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...