Malicious code in pkl-vscode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36b102f69e16083459cf07d2c10dfa74f8921dd7e8eda6686d1ded62b468de73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Unspecified Vulnerability in JetBrains TeamCity

JetBrains TeamCity is a Continuous Integration CI/CD tool that is primarily used to automate the software build, test, and deployment process. A security vulnerability exists in JetBrains TeamCity that can be exploited by an attacker to cause access tokens to continue to work after they have been...

USN-6908-1 tomcat vulnerabilities

It was discovered that the Tomcat SSI printenv command echoed user provided data without escaping it. An attacker could possibly use this issue to perform an XSS attack. CVE-2019-0221 It was discovered that Tomcat incorrectly handled certain uncommon PersistenceManager with FileStore...

Malicious code in mock_simple_module_relative (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5314a68f10a03af92b308ae221d15aa143a97ae197cf96c655476db5638a084b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jfrog-ci-templates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ca6b5be5ca78626dbb231ce098412b200202572a0c8a3513b2a666e342d8004 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

How to Enable HTML5 Connections to Provisioning Services Based Catalogs

Enabling connections from Receiver for HTML5 to desktops deployed using Provisioning Services. Background Enabling connections from Receiver for HTML5 to desktops in Provisioning Services PVS based catalogs might require additional steps to complete depending on the persistence of the write cache...

New Poco RAT Targets Spanish-Speaking Victims in Phishing Campaign

Spanish language victims are the target of an email phishing campaign that delivers a new remote access trojan RAT called Poco RAT since at least February 2024. The attacks primarily single out mining, manufacturing, hospitality, and utilities sectors, according to cybersecurity company Cofense...

Malicious code in komcaxx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e16d460077fe5867d93cdb883add5647909a7ab4fd8fbd15016821bf60682b9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xxxtesting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d38175f6a654132e1c7224f649de92984aa619a34361a3f36efe42eda4aed34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sttylee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f70d38f7c8539d9e0aa7a27b48d56b2e3d9bdab584bf5014eb4c114ccaebb0c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tjh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1706d67cea515cc47b7db8f01f42b975c99d5a341f620d8b851d40462db0587 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rgmedia21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 149f0ec9d0ba73619432fb062c58b93fad9f52f3f97034e25a8354eeca346042 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yorz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45c5ff0124b5fef27210916da169a670acebe845cde5013de7e183430795bcff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kikos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 740a6b318907e2462461dbdb9deeb71e3b3e5d274fa4c6752910326b6c9439c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stylesyosx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82d722f8097881f963d826e9354c183818bb986b8f99d3b93f6a764ddb7b65b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in your-types-export-file (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c47fc8ae445df009de5ffc57a7e7a8a133c700db9f72c38f9c1ace0f66c562be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

This Week in Spring - July 9th, 2024

Hi, Spring fans! Welcome to another installment of This Week in Spring! And what a week it's been! We've got a lot to get into, so let's dive right in. I quite liked this talk, Continuations: The magic behind virtual threads in Java by Balkrishna Rawool @ Spring I/O 2024 In last week's episode of...

Malicious code in lllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllll (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 062d87cd9960f0320b626d6a3a1992927ccb268cab8ce435fa6e70006be525ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

New Golang-Based Zergeca Botnet Capable of Powerful DDoS Attacks

Cybersecurity researchers have uncovered a new botnet called Zergeca that's capable of conducting distributed denial-of-service DDoS attacks. Written in Golang, the botnet is so named for its reference to a string named "ootheca" present in the command-and-control C2 servers "ootheca.pw" and...

Malicious code in @zitterorg/nemo-tenetur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41edbd03c6d4329bed5847f9b7b947f9220ea54a02ba2b59c008f835a1118a25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...