Malicious code in fc-switch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 799f38ee085f9c2d790bf9c9e78379f22e3ad2e3de94ff31011bec69ee78196d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-360 Malicious code in fc-persistence (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08ffca641672539520dd6ae1301f0c09f9fd69d642335c83b5db13bdf7240961 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-persistence (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08ffca641672539520dd6ae1301f0c09f9fd69d642335c83b5db13bdf7240961 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-phone-number (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec30fba8ba38ae5e354c219234fb4dd78d71537718394caf3d584e896c5b0a42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-collabsible (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7cf2a1c7cafc2f63b3b6da7c03ad9e5bb35508693b37096982b17e947379aaa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-customer-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2d285e54aa297d074fb908486497560ee5e7fa75c0c415eda550717a464d868 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in multivariate-experiments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43ad874c630ddc5086d622b1f450560f76c8b2d874591884b3265450f0aad747 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gsattrack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2958f45d2f7addf081dc9f6e0719b1e36a54ba2a40ba3bd8ccc0763cb7deacb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-28161

If temporary "one-time" permissions, such as the ability to use the Camera, were granted to a document loaded using a file: URL, that permission persisted in that tab for all other documents loaded from a file: URL. This is potentially dangerous if the local files came from different sources, suc...

CVE-2023-28161

If temporary "one-time" permissions, such as the ability to use the Camera, were granted to a document loaded using a file: URL, that permission persisted in that tab for all other documents loaded from a file: URL. This is potentially dangerous if the local files came from different sources, suc...

Camaro Dragon Strikes with New TinyNote Backdoor for Intelligence Gathering

The Chinese nation-state group known as Camaro Dragon has been linked to yet another backdoor that's designed to meet its intelligence-gathering goals. Israeli cybersecurity firm Check Point, which dubbed the Go-based malware TinyNote, said it functions as a first-stage payload capable of "basic...

Malicious code in reat-com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb8a3d57163b34785a2092a45dcf9e0e1601b827c144a5a955212214317de9c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in easy-lightbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 539cde116686125274f12080c38227ec92eb6caba54c38acc1f72cedab4a69a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Cybercriminals Targeting Apache NiFi Instances for Cryptocurrency Mining

A financially motivated threat actor is actively scouring the internet for unprotected Apache NiFi instances to covertly install a cryptocurrency miner and facilitate lateral movement. The findings come from the SANS Internet Storm Center ISC, which detected a spike in HTTP requests for "/nifi" o...

SUSE CVE-2023-32318

Nextcloud server provides a home for data. A regression in the session handling between Nextcloud Server and the Nextcloud Text app prevented a correct destruction of the session on logout if cookies were not cleared manually. After successfully authenticating with any other account the previous...

New GobRAT Remote Access Trojan Targeting Linux Routers in Japan

Linux routers in Japan are the target of a new Golang remote access trojan RAT called GobRAT. "Initially, the attacker targets a router whose WEBUI is open to the public, executes scripts possibly by using vulnerabilities, and finally infects the GobRAT," the JPCERT Coordination Center JPCERT/CC...

Malicious code in lupintestingsomethingnewonnpmagain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0758fbab81fbdc4aaf14e3f3a1541795fd58e89824393afdb9ec377b493f2c8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @brand_apps/easystart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c717d46d6be03f627a5dd22496e0e0f20d6c159f0bf51e222789857061b0397 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wcc-connector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e55bf83a3393a668485fec2cbcb072ee078657ab4b98b80e3debd7ec3fb83057 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Info Stealer Abusing Codespaces Puts Discord Users at Risk

In this entry, we detail our research findings on how an info stealer is able to achieve persistence on a victim’s machine by modifying the victim’s Discord client...