Malicious code in funtion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 501077938fdff595541523797e68b1593506ab2dbebd6c2f4d34929227aef334 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discordjs-selfbot-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57a477d2c62670b4c2348d2776b1ecc1a8a07545f77fb1ce23e95003b49b9c86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in en-pagedjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66bcdf119d4bc88b1b012c59baf50c4065be047006c0b47a71243800dbbc5b36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-29850

Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots...

CVE-2022-29850

Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots...

CVE-2022-29850

Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots...

Design/Logic Flaw

Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots...

CVE-2022-29850

Summary: CVE-2022-29850 affects Lexmark printers/products through 2022-04-27. An attacker who has already compromised an affected Lexmark device can use improper input validation to maintain persistence across reboots. Affected component: Lexmark printer product line (unspecified models) with vul...

CVE-2022-29850

Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots...

PT-2022-19877 · Lexmark · Lexmark

Name of the Vulnerable Software and Affected Versions: Lexmark products through 2022-04-27 Description: The issue allows an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots. It is due to improper input validation, which enables external contro...

MagicWeb: NOBELIUM’s post-compromise trick to authenticate as anyone

Updated August 26, 2022: Added instructions to enable collection of AD FS event logs in order to search for Event ID 501, and added a new resource for AD FS audit logging in Microsoft Sentinel. Microsoft security researchers have discovered a post-compromise capability we’re calling MagicWeb, whi...

MagicWeb: NOBELIUM’s post-compromise trick to authenticate as anyone

Updated August 26, 2022: Added instructions to enable collection of AD FS event logs in order to search for Event ID 501, and added a new resource for AD FS audit logging in Microsoft Sentinel. Microsoft security researchers have discovered a post-compromise capability we’re calling MagicWeb, whi...

Malicious code in ceshia-node-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 904b2c5f963fd4aaf932b479caed9c77968bcb1543febf18f617babba1a2444e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in simontok (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware caa06374b63fc26ac5950bd03891861724e6b84eafeeea9a17277df2116b3392 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DoNot Team Hackers Updated its Malware Toolkit with Improved Capabilities

The Donot Team threat actor has updated its Jaca Windows malware toolkit with improved capabilities, including a revamped stealer module designed to plunder information from Google Chrome and Mozilla Firefox browsers. The improvements also include a new infection chain that incorporates previousl...

Malicious code in wbpac-hot-middwleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0020f3d8a3814db48c3c26e4056e2056c8a00aa74c7fdd322b26b44a9a2acac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yeoman-33enerator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46467411b04dd7b9a5c0f9063b47e48dcb506330bdcd90899e4e20e48de784e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xgzgexp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4648b3e140e2ad4056439c03957c9d5cf660fcbce180913b9a08e4561ddabca7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xpsaht (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07a6dc7d48ff38aff56b235f4fbf2e20f7b3242d9e0ec5069978e68a32aa6a68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in utia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12a67fb1aae628b9261e13184946433947c840a938a8fa590bb91892703e678b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...