Malicious code in emon78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81f0edc650da505afa8dc8f6771ea545e69d9082314fd142e36e647658943fdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mmolecule-httprequester (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3ce4137e4fae1d247536d65d77463cb0d1337b13946320fc3f4ca8dc8ef8a18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @manomano-internal/toolbox-pkg-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fc7979e3934ed11d3e174bef1c18bbc67bc57dbce890460d07d7ee1e2d60d68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-41041 User session is still usable after logout in graylog2-server

Graylog is a free and open log management platform. In a multi-node Graylog cluster, after a user has explicitly logged out, a user session may still be used for API requests until it has reached its original expiry time. Each node maintains an in-memory cache of user sessions. Upon a cache-miss,...

Malicious code in frontend-effect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f99fca2bf58d400b4cf4e469118f0ff61967c8a4e29d0ec247501cf57a978428 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

China-Linked Flax Typhoon Cyber Espionage Targets Taiwan's Key Sectors

A nation-state activity group originating from China has been linked to cyber attacks on dozens of organizations in Taiwan as part of a suspected espionage campaign. The Microsoft Threat Intelligence team is tracking the activity under the name Flax Typhoon, which is also known as Ethereal Panda...

New "Whiffy Recon" Malware Triangulates Infected Device Location via Wi-Fi Every Minute

The SmokeLoader malware is being used to deliver a new Wi-Fi scanning malware strain called Whiffy Recon on compromised Windows machines. "The new malware strain has only one operation. Every 60 seconds it triangulates the infected systems' positions by scanning nearby Wi-Fi access points as a da...

Malicious code in fca-supportbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 216be1d91ea2a0a3d5d54d7033f16294c7c1df0f10f021e829986203e562d035 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

New Variant of XLoader macOS Malware Disguised as 'OfficeNote' Productivity App

A new variant of an Apple macOS malware called XLoader has surfaced in the wild, masquerading its malicious features under the guise of an office productivity app called "OfficeNote." "The new version of XLoader is bundled inside a standard Apple disk image with the name OfficeNote.dmg,"...

Malicious code in hreport-preview (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a33613a96a4780a468b53485091475312eb17c0a6c883d4dd09eacfcfc995834 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in usaa-checkbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afe64eeba91a65d635e6c3f7e03290fbdc9358315362742b8e25f65ce9dc1166 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

New Apple iOS 16 Exploit Enables Stealthy Cellular Access Under Fake Airplane Mode

Cybersecurity researchers have documented a novel post-exploit persistence technique on iOS 16 that could be abused to fly under the radar and maintain access to an Apple device even when the victim believes it is offline. The method "tricks the victim into thinking their device's Airplane Mode...

Trawler - PowerShell Script To Help Incident Responders Discover Adversary Persistence Mechanisms

Dredging Windows for Persistence What is it? Trawler is a PowerShell script designed to help Incident Responders discover potential indicators of compromise on Windows hosts, primarily focused on persistence mechanisms including Scheduled Tasks, Services, Registry Modifications, Startup Items,...

Malicious code in nayan-te (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06f6ee2ffa57bdfffbdb60952fe84c9fa2131977939491b1427d6e64f16aadf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in progress-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ef7c85d0514dd6025ca318ffb0b25040d4c1ef626b00125f13d43ea506d3299 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in horaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a180f896e2dd432d2280836c5441fce0ad50a403d3c7f2e6340a91addaabf9b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Cloudflare Tunnel increasingly abused by cybercriminals

Cloudflare Tunnel provides you with a secure way to connect your resources to Cloudflare without a publicly routable IP address. Cybercriminals are increasingly using this service to keep their activities from being detected. Cloudflare Tunnel, also known by its executable name, Cloudflared,...

com.arassec.igor:igor-spring-boot-starter (>=0.6.7 <=0.6.8), com.arassec.igor:igor-standalone (>=0.6.7 <=0.6.8) +211 more potentially affected by CVE-2023-3894 via com.fasterxml.jackson.dataformat:jackson-dataformat-toml (>=2.12.3 <=2.14.2)

com.fasterxml.jackson.dataformat:jackson-dataformat-toml MAVEN version =2.12.3, =0.6.7, =0.6.7, =0.6.7, =0.0.1, =0.18.3, =0.18.3, =0.18.3, =0.18.3, =0.18.3, =0.18.3, =2023.2, =1.1.6, =3.0.0-snapshot.20240126.12648.0.va9dc2d63, =3.0.0-snapshot.20240126.12648.0.va9dc2d63,...

Malicious code in web3tool.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware faed7c123bad8fe9028fa029f7e4c108dbecc8242fe2905610b6946c29e11e71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethereum-cryptographyyy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb7593ecb796620e3c4b6e3e5b66e8e7efa0ddd8ce6cfab3c8e0cca35c62ce96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...