Malicious code in alb-um-availa-ble-zip-mp3-file-38068-its-all-about-to-change-rnonb-pzjjbh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4008f42b5bc2b6647cc2d9e297edb68f60da9ce6c5a20e62b44cb70616a8a6d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in do-wnload-available-6472-sign-o-the-times-1-epmqe-uhykdr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c650588d0bf31ff36119366e5bbc38d01effa27b39e029b71922559d60caca12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aria-web-telemetry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16ad0cfe7b7d9636482741603c31ea841100db6c7a18a17bf08ecbafc906fd7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

New Malware Campaign Uses PureCrypter Loader to Deliver DarkVision RAT

Cybersecurity researchers have disclosed a new malware campaign that leverages a malware loader named PureCrypter to deliver a commodity remote access trojan RAT called DarkVision RAT. The activity, observed by Zscaler ThreatLabz in July 2024, involves a multi-stage process to deliver the RAT...

Perfectl Malware

Perfectl in an impressive piece of malware: The malware has been circulating since at least 2021. It gets installed by exploiting more than 20,000 common misconfigurations, a capability that may make millions of machines connected to the Internet potential targets, researchers from Aqua Security...

Malicious code in redis-oracle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ea6e343b932f13174f4d2feea7f70dcf1900c9b51bf55a2abff025184ed0c87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GitHub, Telegram Bots, and ASCII QR Codes Abused in New Wave of Phishing Attacks

A new tax-themed malware campaign targeting insurance and finance sectors has been observed leveraging GitHub links in phishing email messages as a way to bypass security measures and deliver Remcos RAT, indicating that the method is gaining traction among threat actors. "In this campaign,...

Best Practices to Configure BIG-IP LTM Systems to Encrypt HTTP Persistence Cookies

CISA has observed cyber threat actors leveraging unencrypted persistent cookies managed by the F5 BIG-IP Local Traffic Manager LTM module to enumerate other non-internet facing devices on the network. F5 BIG-IP is a suite of hardware and software solutions designed to manage and secure network...

Malicious code in 1-2-customization-basic-format (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 126e6a02667bae4fef0e53e63993ad1bbf76556e75e37e0e74daf04a7cf00b59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in helri-shiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4d519e88d591f17cacd1c40eb414b21e026b9ea5d54240b23399cf203aeb084 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shmam-test-npm-test-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b028136f8820f808eb720a45a7f396272c884a63944c004999ce50781449b6d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oipmbq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46e04119c13c8a0345a00f9e3a56042c94d81ac8335560334f5692fb940c8fd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 1nzcej (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1049efd60580db19a51c86de897fceec13099eaa58f14c6e0c674a71e4d73f57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ktmf0m (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1eeaef4da21ac52f32e84b98dbbd28a0dd26b69e53840ee9cd565a02a2e344d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in new-script-pubg-emulator-bypass-ldplayer-smartgaga-new-version-aisbev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5654e2f0697b7c2fe602792c52d1b2b7eab0d1c6f26459220b247c0a87a5b11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in new-code-script-down-lo-ad-jjsploit-roblox-executor-fi7j8p (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ba7e29bf181a9fc2806a8929c4fbd604f9ac9bf7d14d4b59b0fdd97918b3194 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dhojpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 935ef1aec71f11b4c67fd9a9faa58e6a292dc183fc14a77ca23d83286ada95ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in new-script-tabg-c-h-e-a-t-f-r-e-e-h-a-c-k-iqaij3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8d4800aa06751461d9c49fc63503ebb13d913c3dbfce484d4fb1abde756e0b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in em5tbe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 492f9a997b1926900687c4080a687bfd21307fcdca9a1e6d5a491ce2453f1ca0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tyussc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2919b6823a5397f90493fa5d50af3ad884fdc8402364dccf5db82188c391d75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...