Malicious code in cd-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4882b60cb8f5f16879f25bb1a16ba37bc10533ed8fef5109291a057a690a89b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Microsoft Warns of Cryptomining Malware Campaign Targeting Linux Servers

A cloud threat actor group tracked as 8220 has updated its malware toolset to breach Linux servers with the goal of installing crypto miners as part of a long-running campaign. "The updates include the deployment of new versions of a crypto miner and an IRC bot," Microsoft Security Intelligence...

Malicious code in cleansheet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16c336fdb150ff783eca4ce31fd4ec23e6982aa39e2b53ca247c56d46215f159 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in purple_team_midway_teste_cenario_2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28934a167292330b02fcc17d36240c4fb6daef5ea6ca4120f4ba7e10b7f53b3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vazgarules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ca4b5d2538771623dbbb59a4140f766f3def6770b88905172976630c3fb32e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rhynocallbackpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bee8048e72c9679df98896285ceae25c5f6a747569f659b6aa8aeaace5237ee7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in horizon_dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82406cfa06f094bb35f44405c48be71c3c5540388e4ef38b508424dc781bd3ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bumblogger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1566bdc7e0ecdd1c4bbecdbe30c791ecc1fec3a2fdb0bc577bf07136299c0ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in slg-shared-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dbd3031f472625754de58e128a37c5fd4d5784d9e57203f7a82ce8460e26b65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Defending Against Scheduled Task Attacks in Windows Environments

Scheduling tasks is one of the most popular attack techniques used by threat actors to establish persistence on a victim’s machine. The Qualys Research Team investigated different ways that attackers could use to conceal scheduled tasks. In this blog, we describe three new techniques to hide and...

Malicious code in usaa-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c08943170a4845decee28f2b70563513b6280f1d54e34a0d4e559ca7dd5afd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in one-world-radio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ffa01ed49e6d70a5a5984e7a2dc3d37a03842a5bc1fc3228c997c91ab11d433 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cyclic-dep-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b3aaef1fd0cef844f265736d15a1a280e4d0c1cb453868e12b3142eb4ca089c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ember-handlebars (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 044a9feb1ca13f566f1e0d6fc5fc0f4195a2e29a43979a45ea6260ab0db9ddf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in google-cloud-node-todos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb7d68d158b2d8227576311310c92e1617519102e1de332cda3854beaaa12043 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in isomsorphic-react-dom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af5cb42b8400c90362f3b20685e648e98824dfcbfb667b1af00eba3754bdd507 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in swisscom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 077089a7a9b30f65182cf15613ff14c223cce05664890e26df87d994ec1291f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wak-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21db5bed3d8d343ad7c9205646eb13bee74a23f45c703b873c797b7a2722f45e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bc-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7c349aa8dccfb6002d5ac7819ce5e0f9549e788225ddcc8c475c9f36d1d600b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in load-date (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd5e61507806967bd7bdac762e3f0f48883157def37151eacca646713cd2fc16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...