Malicious code in waveapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ed8a707955886dfaa2b55283c703e3acbc8f5db17a426587702b53e53a9c0fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blockchain-explorer-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cdabf6ac5434305cb152ee0eaf4d9cbac6f1de324ae91052537dc8fcfa94410 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in monitoring-coverage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa5e340610d92b601dc5de1615c159ce6efea84fa66dccd8d99128054d7cf5c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tari-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6da5a4c9da80939fd8b4009200d8e59514e1d3a5664d9b7150b27f40250a584d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Hackers Target Middle East Governments with Evasive "CR4T" Backdoor

Government entities in the Middle East have been targeted as part of a previously undocumented campaign to deliver a new backdoor dubbed CR4T. Russian cybersecurity company Kaspersky said it discovered the activity in February 2024, with evidence suggesting that it may have been active since at...

Malicious code in hosted-lenses-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05c6cf9e3c0564724471422898f07aea9b5234d6c00d38d95441a3fbe18cd004 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in viiiivek (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55cac2c796a655b4203b015952598ff85be425c2e7b0d0fd4ca5f15da45cb322 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Metasploit Weekly Wrap-Up 04/12/24

Account Takeover using Shadow Credentials The new release of Metasploit Framework includes a Shadow Credentials module added by smashery used for reliably taking over an Active Directory user account or computer, and letting future authentication to happen as that account. This can be chained wit...

Malicious code in @lbnqduy11805/sturdy-chainsaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a472ad3dc99c2febc88648cf3ccbf6f17c2a254e86c2ffa2e8ed945d25665816 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @lbnqduy11805/shiny-rotary-phone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac8ddda17313c540b777f7757d4d61d097a7eb003234cc5c4096ee03e5bd7b73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @lbnqduy11805/reimagined-happiness (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b97e2395d2365418c586217033d6037fb2930c3ad943b2010f1cb2ef41bde62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @lbnqduy11805/ideal-octo-spork (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37f1d31208ac8ecb349535fc04273dfeb84c17d325344aac63719c89ed0c2da5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shuaishuaiqiang (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ac0c8f14a39bde6c27443c843a6185fa0e6ad3c0117eabe24eed2b276ff3336 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-logs-v14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6dbe55f1c7c7a2f1783114a88a3045cdb6a0b355459aa66c2c364e68f396466e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ADOKit - Azure DevOps Services Attack Toolkit

Azure DevOps Services Attack Toolkit - ADOKit is a toolkit that can be used to attack Azure DevOps Services by taking advantage of the available REST API. The tool allows the user to specify an attack module, along with specifying valid credentials API key or stolen authentication cookie for the...

Malicious code in shopify-app-session-storage-drizzle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85a95ee44e756deede8f29d57f2f661bfad35e584127979455d61c95920d1c26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux Version of DinodasRAT Spotted in Cyber Attacks Across Several Countries

A Linux version of a multi-platform backdoor called DinodasRAT has been detected in the wild targeting China, Taiwan, Turkey, and Uzbekistan, new findings from Kaspersky reveal. DinodasRAT, also known as XDealer, is a C++-based malware that offers the ability to harvest a wide range of sensitive...

DinodasRAT Linux implant targeting entities worldwide

DinodasRAT, also known as XDealer, is a multi-platform backdoor written in C++ that offers a range of capabilities. This RAT allows the malicious actor to surveil and harvest sensitive data from a targets computer. A Windows version of this RAT was used in attacks against government entities in...

Malicious code in hessskinchecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dab9a6776a7691f00229937277c2daff6e5424beadea56b66d3b8ec5f201932 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discordinfos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e33393791560ccdc2d1536e4c54b629364d531826ea5402e91e099f9f2df68c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...