Malicious code in wallet-options (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8077634aa96da6da50506aa7920955ec524183b7336c8578215ab88e8d7ac485 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in miew-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea5cd1ed744f747bc00ccfcb2c9b587d0c94ec38dce7fa5e2e70569368030f1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in reorgs-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b13830319a43af9887566ccebf66edc38aa622d4ef7464ffdaabfd9a41942ea1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in atomic-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a312917055a535347fc34c0b8dd11c2a947d7fa9fbfd5972cdfe7fac5d4f981d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in assign-pr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62e185441fd99093a564a1a297859285aaf49df491f7beb894114173c842fd0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in frontegg-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8f178114efbe21e062c2f4f30e82d413adeef06ec35e636e38b9d5fabf5f2c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in action-prebuildify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7d42123dbbc7211362fd4196ee88f2f1183483beab9bf105645f9443d833161 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cat-webcomponent-image (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e416fba4ad4098c98b9a1b6b381472b248c0fc0dd977333c87e9f707251deb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in purple_team_midway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48e1d2b1fbe20521d638df7232e8617a51354104986647c485570374818b08c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-20488 · Typo3 · Typo3

Name of the Vulnerable Software and Affected Versions: TYPO3 versions prior to 9.5.34 ELTS TYPO3 versions prior to 10.4.29 TYPO3 versions prior to 11.5.11 Description: The issue concerns Admin Tool sessions in the TYPO3 backend user interface that were not revoked even if the corresponding user...

SharpEventPersist - Persistence By Writing/Reading Shellcode From Event Log

Persistence by writing/reading shellcode from Event Log. Usage The SharpEventPersist tool takes 4 case-sensitive parameters: -file "C:\path\to\shellcode.bin" -instanceid 1337 -source Persistence -eventlog "Key Management Service". The shellcode is converted to hex and written to the "Key Manageme...

Malicious code in brave-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc50cd5d32f408d873606c4837a20d8bbe471d478d7d7f5a1a2b21112eedfdab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gd-activity-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be919ac20b6023e27b37ab04354acc2fe0d76aadf72ab3ccea2dafed5df390a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in colorred (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12fd242b7e7522faa97ca79398a2ff7fec16037b2754cd07065a4eda93d612cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @manomano-toolbox/api-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db95524e5bf90907d13f9109419d2a10727fd9549c599cad79231ab6359745f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Black Basta Ransomware Teams Up with Malware Stalwart Qbot

A newcomer on the ransomware scene has coopted a 14-year-old malware variant to help it maintain persistence on a targeted network in a recent attack, researchers have found. Black Basta, a ransomware group that emerged in April, leveraged Qbot, a.k.a. Quakbot, to move laterally on a compromised...

Malicious code in kruit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f6d59849346dac98e4f140f1bee01314c9ae375a1c209717e73cc3c2fe48e8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tangerine-state-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83cabb2630e510d0c9b63f6c164c5825dd5325a370fd8db846ead2bb3ed782a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in neo-savant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 269f6641d9eb5c43ea9441f3fe764f0ac3ee148fb8d52084b63c7c61bccf8b18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ms-2.0.0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b103637ace33e42a60052af2564553178c509c8c0bfb5e92c376388891095a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...