UBUNTU-CVE-2022-2503

Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trusted root filesystem. Device-mapper table reloads currently allow users with root privileges to switch out the target with an equivalent dm-linear...

Malicious code in tbb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3de48d43075fd9973cabcbe45fa482af36e5acc26fbbba41e80107cfbf04d572 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ptokens-website-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f2eb8741be933f0b1b3bb5b71c91a9dc94860b2e2dd4706e8a781580f66f26c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @m365-admin/nav (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca8b90e02efef666370b40f0b2ad1cda6842e1d703eae103f1b15988d40bd543 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

TripleCross 安全漏洞

TripleCross is a Linux eBPF rootkit with backdoor, C2, library injection, execution hijacking, persistence, and steganography from the individual developer Marcos Bajo in Spain. A security vulnerability exists in TripleCross version v0.1.0, which stems from a segmentation fault that occurs when...

Malicious code in pplogger-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f79d96a39bd0701b0be053e0cad25703bda81b63b17638a10a26a1e023a91d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lwc-playground (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98e335481687ce6c9f293923692ec4f19da6a49f4d5fe8c014625761fe5a23cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in f36-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8429f79fd714aef2e42d4d72437a7b404d59fc7592a639fb43fb43dde7e6e4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in avax-js-cli-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20bcbb8282cba23d9c896b37231cedc6bae3b5042eff2693e1ee677525401345 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

APT37 employs Konni malware to target high-level organizations

Threat Level Actor Report For a detailed advisory, download the pdf file here Summary The Konni remote access trojan, which is widely used malware by the APT37, is used in the attack campaign to take advantage of high-value targets from countries like the Czech Republic, Poland, and many others...

Malicious code in ot-menu-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4719e9ae5efca357fd891b2be9fde0c17cd90faa6c67a1c4955e7e1f811cfe29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stringjs_lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 408657b4589508928485b1c6cb47eb32fe5964986aaa380196f80f7792356f1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in treeing-cur-content (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b33ad1d54e404abd38b60c215f1efe0c827c6439ee2f223976f67ba655dd5bcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shiba-inu-technologies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be0e17205a55c4159c2077a1a4ec77b22f82254b9288dc3eccc349af3d498b3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pug-web-readiness (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5a3a74c1c2aacf398fdb05e794db90e5375cf11705fc9cb04b5aa8c2944e403 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in app.1inch.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62ae102f5fe985a6a6c1ede8587ae813a6cf3a7367f93ae26a86d89693aeaaa0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Lightning Framework, modular Linux malware

Researchers at Intezer have published a technical analysis of Lightning Framework, a previously undocumented and undetected Linux threat. Lightning is a modular framework that is very versatile and something we don’t see very often in the Linux space. The old argument that Linux systems or Macs f...

Malicious code in nodebb-theme-opera (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a769de2deb47651c7854cd9d1559f3a907a707f3cb60dcfd5aefb5af9d36a6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @cobalt-team/support-email (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4415fff565dfcd73b3d7b833cb710c1c434e9b840697cb99f753d7b69258c01a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jworkflow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b05273c238a079fdb84cb37e33888269314eccf0c346e46defc9d39dc1486669 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...