6880 matches found
Malicious code in @juiggitea/et-fugiat-dolorem-possimus (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69f13dd978f294e84f04073b38848ce840a3cdf529f9cc021425cbba996edc85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @juiggitea/enim-facere-quidem (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb7722f5e1f5fae80c11f3a2cc79159d2dd0983e2673a03bafc47efb0037c9a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @juiggitea/eos-inventore-nulla-ab (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74fbeaf3c7af8f0bbe206779c2e65ff8f8eae602e5b1212a02e3d42dd8291c30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @juiggitea/deleniti-recusandae-optio-tempora (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ec16c1b3191bca80d93e511ae297bf11c162e9e54e6e0c163b6993e92a029ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @juiggitea/dolor-omnis-vitae (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80e3a16cb14eb4985adf9309269e97d31bea65cc6d8357cc323e9eeb95070679 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @juiggitea/consequuntur-aperiam-consectetur-incidunt (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a1c498e36348797a7336a26bf1c68c99d80edf6dc1c403b7dfa362c733af09f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @juiggitea/amet-cupiditate-fugiat (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94f62fe064c189896bbcb72c87b6e37c6191013d4fa827ee24a85ba9abbcfc14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @juiggitea/aliquam-at-eius (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6a0ae228f56bd35003733b29db0b578ebfb21b74cc3c2fe0061cd7e091f5528 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @juiggitea/aperiam-aperiam-amet-exercitationem (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c66deca8c80ee8c47f48cc07b18aa17d5676ceb0964fd672e95395ab7253d4e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sa-antd (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a5a47aaa26aa2c3650f0dfa9daa5f0082df771b02cf7491c1ee4254c1117d87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in eslint-config-bragi (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 729e851afe55af274e357a46544f9bd048813b8ce8f08f586c4c9d0146faa3a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
RHEL 8 : jbossweb (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - tomcat: deserialization flaw in session persistence storage leading to RCE CVE-2020-9484 Note that Nessus has not...
Malicious code in nespresso-design-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4df4d16cd100a965fef42c58150e9688849a5acfa8de2f809b3ed66f5ef9f29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2024-40242 · Typo3 · Typo3
Name of the Vulnerable Software and Affected Versions: TYPO3 affected versions not specified Description: The issue arises from Phar files, which can act as self-extracting archives, leading to the execution of source code when invoked. Phar files can be disguised with various file extensions,...
PT-2024-40534 · Packagist · Typo3/Cms-Core
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue allows existing sessions for a user account to remain active even after the user changes their password. To exploit this, an attacker would need a valid user account, either...
Malware Delivery via Cloud Services Exploits Unicode Trick to Deceive Users
A new attack campaign dubbed CLOUDREVERSER has been observed leveraging legitimate cloud storage services like Google Drive and Dropbox to stage malicious payloads. "The VBScript and PowerShell scripts in the CLOUDREVERSER inherently involves command-and-control-like activities by using Google...
Latrodectus Malware Loader Emerges as IcedID's Successor in Phishing Campaigns
Cybersecurity researchers have observed a spike in email phishing campaigns starting early March 2024 that delivers Latrodectus, a nascent malware loader believed to be the successor to the IcedID malware. "These campaigns typically involve a recognizable infection chain involving oversized...
Malicious code in mixtral-llm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8f29dbee4aa92684c9adc9e0484e255cac83931500c1651073b71123d728fd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sigoner (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2b7a5f58464c5193c5d937ef7dd00a42fa46a5b30ad2dd711d05cb143ca5132 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
