Malicious code in discordd.jss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8ba506117e7c7f49158ad840669844fa4e7893e715370eb8bc3fd032617dd36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CLSA-2023-1691083477 Fix CVE(s): CVE-2021-25329, CVE-2022-23181, CVE-2020-9484

SECURITY UPDATE: Remote Code Execution via session persistence - debian/patches/CVE-2020-9484.patch: Improve validation of storage location when using FileStore. - CVE-2020-9484 SECURITY UPDATE: Fix for CVE-2020-9484 was incomplete - debian/patches/CVE-2021-25329-pre1.patch: Fix some edge cases...

Malicious code in hsisu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c986ceb6d450b915124305a19037997afedd7936b69467f557d17afd7182d27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in storyblok-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44e2fc216a94eece7f4dff23344c885f24361cb497ae18d6c7dde8ba3c4d39a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-tpk05-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68a464386cec91304cf1a2a774e200123d42ae944a6f03bb1b8c272c6d6b85e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ebtd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb50b8a351189eb3838b9913ca61e1c0b0c4269a04f5babe163cbe876380f77f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azuretestpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7deb9b5c64a12562c3e7da95ffdfda5b85dca927880cb96345033abab09d4f08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

STARK#MULE Targets Koreans with U.S. Military-themed Document Lures

An ongoing cyber attack campaign has set its sights on Korean-speaking individuals by employing U.S. Military-themed document lures to trick them into running malware on compromised systems. Cybersecurity firm Securonix is tracking the activity under the name STARKMULE. The scale of the attacks i...

Malicious code in grabathon-v8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45c5d3c773c46d98a52b454f0e11ea84a072863fc1133b5012841efcc9739162 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-26469 · Kirby · Kirby

Name of the Vulnerable Software and Affected Versions: Kirby versions prior to 3.5.8.3 Kirby versions prior to 3.6.6.3 Kirby versions prior to 3.7.5.2 Kirby versions prior to 3.8.4.1 Kirby versions prior to 3.9.6 Description: The issue affects all Kirby sites with user accounts, unless Kirby's AP...

Decoy Dog: New Breed of Malware Posing Serious Threats to Enterprise Networks

A deeper analysis of a recently discovered malware called Decoy Dog has revealed that it's a significant upgrade over the Pupy RAT, an open-source remote access trojan it's modeled on. "Decoy Dog has a full suite of powerful, previously unknown capabilities – including the ability to move victims...

Malicious code in fca-innova (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dae1d312610e319d7fb61e20452f0003de964afa226f8d6db19b7b40bb8f4af4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fedora 38 : redis (2023-c406ba1ff6)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-c406ba1ff6 advisory. Redis 7.0.12 - Released Mon July 10 12:00:00 IDT 2023 Upgrade urgency SECURITY: See security fixes below. Security Fixes: CVE-2022-24834 A specially...

Malicious code in ux-translation-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a1c7fc5ab29649fa65f5fbebcceb914ec5132e7c0a46b38a656b508274a5098 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-horizon-remaster (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d82aee22fcb9d69dc1b8ec8823954165ce545b1ab39eebd6f330094e1b84af84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sssssssignalr-temp-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15cc23bf354e5520194687388c9f9fedf32c28fbdd1bdaeb8abb7a0b1943f352 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-anjelov3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d5c2cfcabc91d71e694daa9c1ed247545a624da57ad205f877c620401bf5f73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-jelo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2baa7413e9468acd20ce003a6b7caa412c7a2e6cd7d941702add8ac4dcd0bf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-siwoo-remake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9273c6939c7a7760a350513f92afeff5af2d0373e575285a61baa1342870b67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Old Blackmoon Trojan, NEW Monetization Approach

Rapid7 is tracking a new, more sophisticated and staged campaign using the Blackmoon trojan, which appears to have originated in November 2022. The campaign is actively targeting various businesses primarily in the USA and Canada. However, it is not used to steal credentials, instead, it implemen...